CVE-2006-3198

Опубликовано: 23 июн. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large height and width values, which causes less memory to be allocated than intended.

Ссылки

http://secunia.com/advisories/20787
Broken Link
http://secunia.com/advisories/20897
Broken Link
http://securityreason.com/securityalert/1133
Third Party Advisory
http://securitytracker.com/id?1016362
Broken Link
Third Party Advisory
VDB Entry
http://www.novell.com/linux/security/advisories/2006_38_opera.html
Broken Link
http://www.securityfocus.com/archive/1/438074/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/18594
Broken Link
Third Party Advisory
VDB Entry
http://www.vigilantminds.com/advi_detail.php?id=45
Broken Link
Vendor Advisory
http://www.vupen.com/english/advisories/2006/2491
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/27318
Third Party Advisory
VDB Entry
http://secunia.com/advisories/20787
Broken Link
http://secunia.com/advisories/20897
Broken Link
http://securityreason.com/securityalert/1133
Third Party Advisory
http://securitytracker.com/id?1016362
Broken Link
Third Party Advisory
VDB Entry
http://www.novell.com/linux/security/advisories/2006_38_opera.html
Broken Link
http://www.securityfocus.com/archive/1/438074/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/18594
Broken Link
Third Party Advisory
VDB Entry
http://www.vigilantminds.com/advi_detail.php?id=45
Broken Link
Vendor Advisory
http://www.vupen.com/english/advisories/2006/2491
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/27318
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*

Версия до 8.5.4 (включая)

EPSS

Процентиль: 93%

0.09592

Низкий

7.5 High

CVSS2

Дефекты

CWE-190

Связанные уязвимости

GHSA-gp2r-v8cq-cp3j

github

почти 4 года назад