Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.902182
Categoría:Denial of Service
Título:Opera Browser Multiple Denial Of Service Vulnerability - Windows
Resumen:Opera Web Browser is prone to Multiple Denial of Service vulnerability.
Descripción:Summary:
Opera Web Browser is prone to Multiple Denial of Service vulnerability.

Vulnerability Insight:
Multiple flaws are due to:

- Opera executes a mail application in situations where an 'IMG' element has
a 'SRC' attribute that is a redirect to a mailto: URL, which allows remote
attackers to launch excessive application via an HTML document with many
images.

- Improper handling of 'IFRAME' element with a mailto: URL in its 'SRC'
attribute, which allows remote attackers to consume resources via an HTML
document with many IFRAME elements.

Vulnerability Impact:
Successful exploitation will allow remote attackers to cause
a denial of service.

Affected Software/OS:
Opera version 9.52 and prior on Windows.

Solution:
No known solution was made available for at least one year
since the disclosure of this vulnerability. Likely none will be provided anymore.
General solution options are to upgrade to a newer release, disable respective
features, remove the product or replace the product by another one.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2010-1989
Bugtraq: 20100518 DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Google Search)
http://www.securityfocus.com/archive/1/511327/100/0/threaded
http://websecurity.com.ua/4206/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11664
Common Vulnerability Exposure (CVE) ID: CVE-2010-1993
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11952
SuSE Security Announcement: SUSE-SR:2010:014 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
CopyrightCopyright (C) 2010 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.