CVE-2005-4718 Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(0);" style attribute, a "bodyA" tag, a long string, and a "u...
MediumCVSS 5.0
EPSS 10.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(0);" style attribute, a "bodyA" tag, a long string, and a "u" tag with a long attribute, as demonstrated by opera.html; and (2) a BGSOUND element with a "margin:-99;" STYLE attribute.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opera browser | <= 8.02 | No fix listed |
References
- 1015067 broken-link exploit third-party-advisory vdb-entry
- www.addict3d.org exploit
- www.addict3d.org exploit