CVE-2008-5679 The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption.
HighCVSS 9.3
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opera | All versions | No fix listed |
| opera | <= 9.62 | No fix listed |
| opera | = 5..10 | No fix listed |
| opera | = 5.0 | No fix listed |
| opera | = 5.0-beta_2 | No fix listed |
| opera | = 5.0-beta_3 | No fix listed |
| opera | = 5.0-beta_4 | No fix listed |
| opera | = 5.0-beta_5 | No fix listed |
| opera | = 5.0-beta_6 | No fix listed |
| opera | = 5.0-beta_7 | No fix listed |
| opera | = 5.0-beta_8 | No fix listed |
| opera | = 5.1 | No fix listed |
| opera | = 5.02 | No fix listed |
| opera | = 5.2 | No fix listed |
| opera | = 5.3 | No fix listed |
| opera | = 5.4 | No fix listed |
| opera | = 5.5 | No fix listed |
| opera | = 5.6 | No fix listed |
| opera | = 5.7 | No fix listed |
| opera | = 5.8 | No fix listed |
| opera | = 5.9 | No fix listed |
| opera | = 5.10 | No fix listed |
| opera | = 5.11 | No fix listed |
| opera | = 5.12 | No fix listed |
| opera | = 6-beta_1 | No fix listed |
Show 72 more
| Product | Affected versions | Fixed in |
|---|---|---|
| opera | = 6.0 | No fix listed |
| opera | = 6.0-beta_1 | No fix listed |
| opera | = 6.0-beta_2 | No fix listed |
| opera | = 6.0-beta_3 | No fix listed |
| opera | = 6.1 | No fix listed |
| opera | = 6.01 | No fix listed |
| opera | = 6.02 | No fix listed |
| opera | = 6.03 | No fix listed |
| opera | = 6.04 | No fix listed |
| opera | = 6.05 | No fix listed |
| opera | = 6.06 | No fix listed |
| opera | = 6.11 | No fix listed |
| opera | = 6.12 | No fix listed |
| opera | = 7-beta_1 | No fix listed |
| opera | = 7-beta_1.2 | No fix listed |
| opera | = 7.0 | No fix listed |
| opera | = 7.0-beta_1 | No fix listed |
| opera | = 7.0-beta_1v2 | No fix listed |
| opera | = 7.0-beta_2 | No fix listed |
| opera | = 7.01 | No fix listed |
| opera | = 7.02 | No fix listed |
| opera | = 7.03 | No fix listed |
| opera | = 7.10 | No fix listed |
| opera | = 7.11 | No fix listed |
| opera | = 7.20 | No fix listed |
| opera | = 7.20-beta7 | No fix listed |
| opera | = 7.21 | No fix listed |
| opera | = 7.22 | No fix listed |
| opera | = 7.23 | No fix listed |
| opera | = 7.50 | No fix listed |
| opera | = 7.50-beta_1 | No fix listed |
| opera | = 7.51 | No fix listed |
| opera | = 7.52 | No fix listed |
| opera | = 7.53 | No fix listed |
| opera | = 7.54 | No fix listed |
| opera | = 7.54-update_1 | No fix listed |
| opera | = 7.54-update_2 | No fix listed |
| opera | = 8.0 | No fix listed |
| opera | = 8.0-beta_1 | No fix listed |
| opera | = 8.0-beta_2 | No fix listed |
| opera | = 8.0-beta_3 | No fix listed |
| opera | = 8.01 | No fix listed |
| opera | = 8.02 | No fix listed |
| opera | = 8.50 | No fix listed |
| opera | = 8.51 | No fix listed |
| opera | = 8.52 | No fix listed |
| opera | = 8.53 | No fix listed |
| opera | = 8.54 | No fix listed |
| opera | = 9.0 | No fix listed |
| opera | = 9.0-beta_1 | No fix listed |
| opera | = 9.0-beta_2 | No fix listed |
| opera | = 9.01 | No fix listed |
| opera | = 9.02 | No fix listed |
| opera | = 9.6 | No fix listed |
| opera | = 9.10 | No fix listed |
| opera | = 9.20 | No fix listed |
| opera | = 9.20-beta_1 | No fix listed |
| opera | = 9.21 | No fix listed |
| opera | = 9.22 | No fix listed |
| opera | = 9.23 | No fix listed |
| opera | = 9.24 | No fix listed |
| opera | = 9.25 | No fix listed |
| opera | = 9.26 | No fix listed |
| opera | = 9.27 | No fix listed |
| opera | = 9.50 | No fix listed |
| opera | = 9.50-beta_1 | No fix listed |
| opera | = 9.50-beta_2 | No fix listed |
| opera | = 9.51 | No fix listed |
| opera | = 9.52 | No fix listed |
| opera | = 9.60 | No fix listed |
| opera | = 9.60-beta_1 | No fix listed |
| opera | = 9.61 | No fix listed |
References
- 34294 third-party-advisory
- GLSA-200903-30 vendor-advisory
- 4791 third-party-advisory
- www.nruns.com
- www.opera.com
- www.opera.com
- 20081217 n.runs-SA-2008.010 - Opera HTML parsing Code Execution mailing-list
- 1021460 vdb-entry