NVD

Id
13232  
Name
CVE-2010-1728  
Description
Opera before 10.53 on Windows and Mac OS X does not properly handle a series of document modifications that occur asynchronously, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an infinite loop, leading to attempted use of uninitialized memory. NOTE: this might overlap CVE-2006-6955.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-05-06  
Modified Date
2010-08-21  
Seq
2010-1728  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
73064 13232 CVE-2010-1728 http://h.ackack.net/?p=258  View
73065 13232 CVE-2010-1728 http://my.opera.com/desktopteam/blog/2010/04/28/opera-10-53-rc1-for-windows-and-mac  View
73066 13232 CVE-2010-1728 oval:org.mitre.oval:def:11927  View
73067 13232 CVE-2010-1728 http://www.opera.com/docs/changelogs/mac/1053/  View
73068 13232 CVE-2010-1728 http://www.opera.com/docs/changelogs/windows/1053/  View
73069 13232 CVE-2010-1728 http://www.opera.com/support/kb/view/953/  View
73070 13232 CVE-2010-1728 ADV-2010-0999  View
73071 13232 CVE-2010-1728 opera-documentwrite-code-execution(58231)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36253 JVNDB-2010-002033 Windows および Mac OS X 上で稼働する Opera における任意のコードを実行される脆弱性 Windows および Mac OS X 上で稼働する Opera には、非同期的に発生する一連のドキュメント変更を適切に処理しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-1728 44308 CVE-2010-1728 13232 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002033.html 2010-04-30 2010-09-27 View