CVE-2010-1728

Опубликовано: 06 мая 2010

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Opera before 10.53 on Windows and Mac OS X does not properly handle a series of document modifications that occur asynchronously, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via JavaScript that writes sequences in an infinite loop, leading to attempted use of uninitialized memory. NOTE: this might overlap CVE-2006-6955.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*

Версия до 10.52 (включая)

cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:8.51:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:8.52:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:8.54:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.25:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.26:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.27:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.50:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.50:beta2:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.51:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.52:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.60:beta1:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.61:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.63:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:9.64:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:10.00:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:10.00:beta1:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:10.00:beta2:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:10.00:beta3:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:10.01:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:10.10:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:10.10:beta1:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:10.50:*:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:10.50:beta1:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:10.50:beta2:*:*:*:*:*:*

cpe:2.3:a:opera:opera_browser:10.51:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.11455

Средний

9.3 Critical

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-9m6g-cc2f-9f4h

github

больше 3 лет назад

Opera before 10.53 on Windows and Mac OS X does not properly handle a series of document modifications that occur asynchronously, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an infinite loop, leading to attempted use of uninitialized memory. NOTE: this might overlap CVE-2006-6955.