NVD

Id
8705  
Name
CVE-2011-1824  
Description
The VEGAOpBitmap::AddLine function in Opera before 10.61 does not properly initialize memory during processing of the SIZE attribute of a SELECT element, which allows remote attackers to trigger an invalid memory write operation, and consequently cause a denial of service (application crash) or possibly execute arbitrary code, via a large integer attribute value.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-05-10  
Modified Date
2011-09-21  
Seq
2011-1824  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
50236 8705 CVE-2011-1824 8244  View
50237 8705 CVE-2011-1824 http://www.opera.com/docs/changelogs/mac/1061/  View
50238 8705 CVE-2011-1824 http://www.opera.com/docs/changelogs/unix/1061/  View
50239 8705 CVE-2011-1824 http://www.opera.com/docs/changelogs/windows/1061/  View
50240 8705 CVE-2011-1824 20110509 TSSA-2011-02 - Opera : SELECT SIZE Arbitrary null write  View
50241 8705 CVE-2011-1824 47764  View
50242 8705 CVE-2011-1824 http://www.toucan-system.com/advisories/tssa-2011-02.txt  View
50243 8705 CVE-2011-1824 opera-select-dos(67338)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37821 JVNDB-2010-003606 Opera の VEGAOpBitmap::AddLine 関数における無効なメモリへ書き込みされる脆弱性 Opera の VEGAOpBitmap::AddLine 関数は、SELECT 要素の SIZE 属性の処理の間に適切にメモリを初期化しないため、無効なメモリへ書き込みされる脆弱性が存在します。 CVE-2011-1824 49731 CVE-2011-1824 8705 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003606.html 2010-08-12 2012-03-27 View