BID:32891

Opera Web Browser HTML Parsing Heap-Based Remote Code Execution Vulnerability

Info

Opera Web Browser HTML Parsing Heap-Based Remote Code Execution Vulnerability

Bugtraq ID:	32891
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-5679
Remote:	Yes
Local:	No
Published:	Dec 16 2008 12:00AM
Updated:	Mar 17 2009 01:16PM
Credit:	Alexios Fakos of n.runs AG
Vulnerable:	Opera Software Opera Web Browser 9.62 Opera Software Opera Web Browser 9.61 Opera Software Opera Web Browser 9.60 beta 1 Opera Software Opera Web Browser 9.60 Opera Software Opera Web Browser 9.52 Opera Software Opera Web Browser 9.51 Opera Software Opera Web Browser 9.50 beta Opera Software Opera Web Browser 9.5 Opera Software Opera Web Browser 9.27 Opera Software Opera Web Browser 9.26 Opera Software Opera Web Browser 9.25 Opera Software Opera Web Browser 9.24 Opera Software Opera Web Browser 9.23 Opera Software Opera Web Browser 9.22 Opera Software Opera Web Browser 9.21 Opera Software Opera Web Browser 9.20 beta 1 Opera Software Opera Web Browser 9.20 Opera Software Opera Web Browser 9.10 Opera Software Opera Web Browser 9.02 Opera Software Opera Web Browser 9.01 Opera Software Opera Web Browser 9 Gentoo Linux

Not Vulnerable:	Opera Software Opera Web Browser 9.63

Discussion

Opera Web Browser HTML Parsing Heap-Based Remote Code Execution Vulnerability

Opera Web Browser is a browser that runs on multiple operating systems.

Opera Web Browser is prone to a heap-based memory-corruption vulnerability because of a flaw in parsing certain HTML constructs.

Attackers can exploit this issue to execute arbitrary code or crash the affected application.

NOTE: This issue was previously covered in BID 32864 (Opera Web Browser prior to 9.63 Multiple Security Vulnerabilities), but has been given its own record to better document the issue.

Versions prior to Opera 9.63 are vulnerable.

Exploit / POC

Opera Web Browser HTML Parsing Heap-Based Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

Opera Web Browser HTML Parsing Heap-Based Remote Code Execution Vulnerability

Solution:
The vendor released an advisory and updates to address these issues. Please see the references for more information.

Opera Software Opera Web Browser 9.51