The VEGAOpBitmap::AddLine function in Opera prior to 10.61 does not properly initialize memory during processing of the SIZE attribute of a SELECT element, which allows remote malicious users to trigger an invalid memory write operation, and consequently cause a denial of service (application crash) or possibly execute arbitrary code, via a large integer attribute value.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
opera opera browser 5.0 |
||
opera opera browser 6.0 |
||
opera opera browser 9.50 |
||
opera opera browser 9.60 |
||
opera opera browser 10.50 |
||
opera opera browser 9.20 |
||
opera opera browser 7.54 |
||
opera opera browser 7.52 |
||
opera opera browser 7.22 |
||
opera opera browser 7.50 |
||
opera opera browser 7.23 |
||
opera opera browser 7.20 |
||
opera opera browser 8.51 |
||
opera opera browser 6.04 |
||
opera opera browser 6.03 |
||
opera opera browser 7.11 |
||
opera opera browser 9.0 |
||
opera opera browser 6.1 |
||
opera opera browser 10.51 |
||
opera opera browser |
||
opera opera browser 9.61 |
||
opera opera browser 9.23 |
||
opera opera browser 9.52 |
||
opera opera browser 10.00 |
||
opera opera browser 10.10 |
||
opera opera browser 9.62 |
||
opera opera browser 9.64 |
||
opera opera browser 9.26 |
||
opera opera browser 9.27 |
||
opera opera browser 10.01 |
||
opera opera browser 9.51 |
||
opera opera browser 8.0 |
||
opera opera browser 9.10 |
||
opera opera browser 7.10 |
||
opera opera browser 7.0 |
||
opera opera browser 7.01 |
||
opera opera browser 8.02 |
||
opera opera browser 6.06 |
||
opera opera browser 8.50 |
||
opera opera browser 5.10 |
||
opera opera browser 5.02 |
||
opera opera browser 9.02 |
||
opera opera browser 6.11 |
||
opera opera browser 7.51 |
||
opera opera browser 7.53 |
||
opera opera browser 7.03 |
||
opera opera browser 8.01 |
||
opera opera browser 8.53 |
||
opera opera browser 6.05 |
||
opera opera browser 6.02 |
||
opera opera browser 5.11 |
||
opera opera browser 8.52 |
||
opera opera browser 9.12 |
||
opera opera browser 6.12 |
||
opera opera browser 9.63 |
||
opera opera browser 9.24 |
||
opera opera browser 9.25 |
||
opera opera browser 10.52 |
||
opera opera browser 10.53 |
||
opera opera browser 9.21 |
||
opera opera browser 7.21 |
||
opera opera browser 8.54 |
||
opera opera browser 7.60 |
||
opera opera browser 7.02 |
||
opera opera browser 6.01 |
||
opera opera browser 5.12 |
||
opera opera browser 9.01 |
||
opera opera browser 9.22 |
||
opera opera browser 10.54 |
||
opera opera browser 10.60 |
Vulmon