CVE-2004-1615

Опубликовано: 18 окт. 2004

Источник: nvd

CVSS2: 2.6

EPSS Низкий

Описание

Opera allows remote attackers to cause a denial of service (invalid memory reference and application crash) via a web page or HTML email that contains a TBODY tag with a large COL SPAN value, as demonstrated by mangleme.

Ссылки

http://lcamtuf.coredump.cx/mangleme/gallery/
Broken Link
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html
Broken Link
Exploit
Vendor Advisory
http://marc.info/?l=bugtraq&m=109811406620511&w=2
Mailing List
http://www.securityfocus.com/bid/11441
Broken Link
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17806
Third Party Advisory
VDB Entry
http://lcamtuf.coredump.cx/mangleme/gallery/
Broken Link
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html
Broken Link
Exploit
Vendor Advisory
http://marc.info/?l=bugtraq&m=109811406620511&w=2
Mailing List
http://www.securityfocus.com/bid/11441
Broken Link
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17806
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*

Версия до 7.54 (включая)

EPSS

Процентиль: 81%

0.01569

Низкий

2.6 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-v97r-xxvr-6fc5

github

почти 4 года назад