Opera View Source Scrolling Denial of Service Vulnerability

Bugtraq ID:	24986
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 20 2007 12:00AM
Updated:	Jul 24 2007 04:06AM
Credit:	Discovered by N9, bigb0u, cybergoth, iglOo, mircia, Povilas
Vulnerable:	Opera Software Opera Web Browser 9.22
Not Vulnerable:

Opera View Source Scrolling Denial of Service Vulnerability

Opera Web Browser is prone to a denial-of-service vulnerability. This issue occurs when viewing and scrolling through the source code of specially crafted HTML files.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Arbitrary code execution may be possible, but this has not been confirmed.

This issue affects Opera 9.20 and 9.22; other version are also affected.

Opera View Source Scrolling Denial of Service Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/24986.html

Opera View Source Scrolling Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected]..

Opera View Source Scrolling Denial of Service Vulnerability

References:

• Opera Home Page (Opera Software)
  
• rare bug in Opera 9.20 browser ([email protected])