CVE-2003-1397 The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method.
MediumCVSS 4.3
EPSS 6.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opera browser | = 6.05 | No fix listed |
| opera browser | = 7.0 | No fix listed |
| opera browser | = 7.0-beta1 | No fix listed |
| opera browser | = 7.0-beta1_v2 | No fix listed |
| opera browser | = 7.0-beta2 | No fix listed |
| opera browser | = 7.01 | No fix listed |
References
- 3255 third-party-advisory
- 20030210 Java-Applet crashes Opera 6.05 and 7.01 broken-link exploit mailing-list third-party-advisory vdb-entry
- 6814 broken-link third-party-advisory vdb-entry
- opera-plugincontextshowdocument-bo(11280) vdb-entry