CVE-2007-0127
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.8%
The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled pointer to be referenced during the virtual function call.
Produtos afetados
n/a · n/aReferências
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=458http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.htmlhttp://osvdb.org/31575http://secunia.com/advisories/23613http://secunia.com/advisories/23739http://secunia.com/advisories/23771http://securitytracker.com/id?1017473http://www.gentoo.org/security/en/glsa/glsa-200701-08.xmlhttp://www.opera.com/support/search/supsearch.dml?index=851http://www.vupen.com/english/advisories/2007/0060