CVE-2006-1834

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 19-04-2006 06:06

Last modified: - 06-10-2022 02:13

Total changes: - 2

Description

Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem makes the attack easier with shorter strings.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:H/Au:N/C:P/I:P/A:P

High

Attack complexity

Network

Attack vector

Low

Availability

Low

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

5.1

Base score

4.9

6.4

Exploitability score

Impact score

Verification logic

Reference

http://www.sec-consult.com/259.html
http://www.opera.com/docs/changelogs/windows/854/
17513-Exploit, Patch
1015912-Exploit
SUSE-SR:2006:010-
20117-
GLSA-200606-01-
ADV-2006-1354-
20060413 SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow-
opera-wcsncpy-css-bo(25829)-
20060413 SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow-

Keywords

CVE-2006-1834

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2006-1834

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures