CVE-2007-0127

EPSS 4.73%
Veröffentlicht 09.01.2007 02:28:00
Zuletzt bearbeitet 16.06.2026 22:34:58
Erkennungen
Login

The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled pointer to be referenced during the virtual function call.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 13

NVD 94 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Opera ≫ Opera Browser Version <= 9.02

Opera ≫ Opera Browser Version 1.00

Opera ≫ Opera Browser Version 2.00

Opera ≫ Opera Browser Version 2.10

Opera ≫ Opera Browser Version 2.10 Update beta1

Opera ≫ Opera Browser Version 2.10 Update beta2

Opera ≫ Opera Browser Version 2.10 Update beta3

Opera ≫ Opera Browser Version 2.12

Opera ≫ Opera Browser Version 3.00

Opera ≫ Opera Browser Version 3.00 Update beta

Opera ≫ Opera Browser Version 3.10

Opera ≫ Opera Browser Version 3.21

Opera ≫ Opera Browser Version 3.50

Opera ≫ Opera Browser Version 3.51

Opera ≫ Opera Browser Version 3.60

Opera ≫ Opera Browser Version 3.61

Opera ≫ Opera Browser Version 3.62

Opera ≫ Opera Browser Version 3.62 Update beta

Opera ≫ Opera Browser Version 4.00

Opera ≫ Opera Browser Version 4.00 Update beta2

Opera ≫ Opera Browser Version 4.00 Update beta3

Opera ≫ Opera Browser Version 4.00 Update beta4

Opera ≫ Opera Browser Version 4.00 Update beta5

Opera ≫ Opera Browser Version 4.00 Update beta6

Opera ≫ Opera Browser Version 4.01

Opera ≫ Opera Browser Version 4.02

Opera ≫ Opera Browser Version 5.0

Opera ≫ Opera Browser Version 5.0 Update beta2

Opera ≫ Opera Browser Version 5.0 Update beta3

Opera ≫ Opera Browser Version 5.0 Update beta4

Opera ≫ Opera Browser Version 5.0 Update beta5

Opera ≫ Opera Browser Version 5.0 Update beta6

Opera ≫ Opera Browser Version 5.0 Update beta7

Opera ≫ Opera Browser Version 5.0 Update beta8

Opera ≫ Opera Browser Version 5.02

Opera ≫ Opera Browser Version 5.10

Opera ≫ Opera Browser Version 5.11

Opera ≫ Opera Browser Version 5.12

Opera ≫ Opera Browser Version 6.0

Opera ≫ Opera Browser Version 6.0 Update beta1

Opera ≫ Opera Browser Version 6.0 Update beta2

Opera ≫ Opera Browser Version 6.0 Update tp1

Opera ≫ Opera Browser Version 6.0 Update tp2

Opera ≫ Opera Browser Version 6.0 Update tp3

Opera ≫ Opera Browser Version 6.1

Opera ≫ Opera Browser Version 6.01

Opera ≫ Opera Browser Version 6.1 Update beta1

Opera ≫ Opera Browser Version 6.02

Opera ≫ Opera Browser Version 6.03

Opera ≫ Opera Browser Version 6.04

Opera ≫ Opera Browser Version 6.05

Opera ≫ Opera Browser Version 6.06

Opera ≫ Opera Browser Version 6.11

Opera ≫ Opera Browser Version 6.12

Opera ≫ Opera Browser Version 7.0

Opera ≫ Opera Browser Version 7.0 Update beta1

Opera ≫ Opera Browser Version 7.0 Update beta1_v2

Opera ≫ Opera Browser Version 7.0 Update beta2

Opera ≫ Opera Browser Version 7.01

Opera ≫ Opera Browser Version 7.02

Opera ≫ Opera Browser Version 7.03

Opera ≫ Opera Browser Version 7.10

Opera ≫ Opera Browser Version 7.10 Update beta1

Opera ≫ Opera Browser Version 7.11

Opera ≫ Opera Browser Version 7.11 Update beta2

Opera ≫ Opera Browser Version 7.20

Opera ≫ Opera Browser Version 7.20 Update beta7

Opera ≫ Opera Browser Version 7.21

Opera ≫ Opera Browser Version 7.22

Opera ≫ Opera Browser Version 7.23

Opera ≫ Opera Browser Version 7.50

Opera ≫ Opera Browser Version 7.50 Update beta1

Opera ≫ Opera Browser Version 7.51

Opera ≫ Opera Browser Version 7.52

Opera ≫ Opera Browser Version 7.53

Opera ≫ Opera Browser Version 7.54

Opera ≫ Opera Browser Version 7.54 Update update1

Opera ≫ Opera Browser Version 7.54 Update update2

Opera ≫ Opera Browser Version 7.60

Opera ≫ Opera Browser Version 8.0

Opera ≫ Opera Browser Version 8.0 Update beta1

Opera ≫ Opera Browser Version 8.0 Update beta2

Opera ≫ Opera Browser Version 8.0 Update beta3

Opera ≫ Opera Browser Version 8.01

Opera ≫ Opera Browser Version 8.02

Opera ≫ Opera Browser Version 8.50

Opera ≫ Opera Browser Version 8.51

Opera ≫ Opera Browser Version 8.52

Opera ≫ Opera Browser Version 8.53

Opera ≫ Opera Browser Version 8.54

Opera ≫ Opera Browser Version 9.0

Opera ≫ Opera Browser Version 9.0 Update beta1

Opera ≫ Opera Browser Version 9.0 Update beta2

Opera ≫ Opera Browser Version 9.01

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.73%	0.91

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html

http://secunia.com/advisories/23613

Patch

Vendor Advisory

http://secunia.com/advisories/23739

Vendor Advisory

http://secunia.com/advisories/23771

Vendor Advisory

http://securitytracker.com/id?1017473

http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml

http://www.vupen.com/english/advisories/2007/0060

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=458

Patch

Vendor Advisory

http://osvdb.org/31575

http://www.opera.com/support/search/supsearch.dml?index=851

https://nvd.nist.gov/vuln/detail/CVE-2007-0127

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-0127

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-0127

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2007-0127