CVE-2010-1349
Published Apr 12, 2010
Last updated 7 years ago
Overview
- Description
- Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-189
Evaluator
- Comment
- -
- Impact
- Per: http://my.opera.com/securitygroup/blog/2010/03/09/the-malformed-content-length-header-security-issue 'We also determined that the problem only existed in our Windows version. '
- Solution
- Per: http://my.opera.com/securitygroup/blog/2010/03/09/the-malformed-content-length-header-security-issue 'We also determined that the problem only existed in our Windows version. '
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:opera:opera_browser:10.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FE9E7F2-68B1-448D-86B6-52B345DD3C01"
},
{
"criteria": "cpe:2.3:a:opera:opera_browser:10.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "137E9883-BF1D-4B54-A904-AFDE179452A3"
},
{
"criteria": "cpe:2.3:a:opera:opera_browser:10.50:beta_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC6B228B-1F69-47F5-80EC-A63649361865"
},
{
"criteria": "cpe:2.3:a:opera:opera_browser:10.50:beta_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F752ED55-A696-467F-AC28-62DC9F73DA49"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]