RETIRED: Opera Web Browser CSS Background URI Memory Corruption Vulnerability

Bugtraq ID:	19166
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 25 2006 12:00AM
Updated:	Aug 17 2006 12:25AM
Credit:	Discovered by hdm.
Vulnerable:	Opera Software Opera Web Browser 9
Not Vulnerable:	Opera Software Opera Web Browser 9.01

RETIRED: Opera Web Browser CSS Background URI Memory Corruption Vulnerability

Opera Web Browser is prone to a memory-corruption vulnerability.

A remote attacker may trigger this issue by enticing a user to visit a malicious website.

This issue has been reported in Opera 9. Other versions may be vulnerable as well.

This BID has been retired because the vendor reported that this issue is a duplicate of BID 18585 (Opera Malicious HTML Processing Denial of Service Vulnerability).

RETIRED: Opera Web Browser CSS Background URI Memory Corruption Vulnerability

A proof of concept is available.

• /data/vulnerabilities/exploits/Mobb26_poc.txt

RETIRED: Opera Web Browser CSS Background URI Memory Corruption Vulnerability

Solution:
The vendor released version 9.01 to address this issue. Please see the references for more information.

RETIRED: Opera Web Browser CSS Background URI Memory Corruption Vulnerability

References:

• MoBB #26: Opera CSS Background (hdm)
  
• Opera Web Browser Home Page (Opera Software)