4.3
CVE-2003-1397
- EPSS 6.12%
- Veröffentlicht 31.12.2003 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:04:05
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Opera ≫ Opera Browser Version6.05
Opera ≫ Opera Browser Version7.0
Opera ≫ Opera Browser Version7.0 Updatebeta1
Opera ≫ Opera Browser Version7.0 Updatebeta1_v2
Opera ≫ Opera Browser Version7.0 Updatebeta2
Opera ≫ Opera Browser Version7.01
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 6.12% | 0.925 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
http://securityreason.com/securityalert/3255
http://www.securityfocus.com/archive/1/311214
http://www.securityfocus.com/bid/6814
https://exchange.xforce.ibmcloud.com/vulnerabilities/11280