Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."
oryginał ENCVSS Vector
AV:N/AC:M/Au:N/C:C/I:C/A:COpera Browser
APPOpera< 9.23
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCE
CWE
Referencje
Powiązane podatności
CVE-2018-18913HIGH7.8ten sam produkt
Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a Z...
CVE-2015-8960HIGH8.1ten sam produkt
The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh...
CVE-2013-3211HIGH10.0ten sam produkt
Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to a "moderatel...
CVE-2013-1637HIGH9.3ten sam produkt
Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events.
CVE-2013-1638HIGH9.3ten sam produkt
Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.