← back
CVE-2006-1834

CVE-2006-1834

EPSS 12.1%
Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem makes the attack easier with shorter strings.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/27641unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.suse.com/archive/suse-security-announce/2006-May/0004.htmlhttp://marc.info/?l=full-disclosure&m=114493114031891&w=2http://secunia.com/advisories/20117http://security.gentoo.org/glsa/glsa-200606-01.xmlhttp://securitytracker.com/id?1015912https://exchange.xforce.ibmcloud.com/vulnerabilities/25829http://www.opera.com/docs/changelogs/windows/854/http://www.sec-consult.com/259.htmlhttp://www.securityfocus.com/archive/1/430876/100/0/threadedhttp://www.securityfocus.com/bid/17513http://www.vupen.com/english/advisories/2006/1354