Opera Web Browser 'Select' HTML Element Integer Overflow Vulnerability

Bugtraq ID:	45951
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jan 21 2011 12:00AM
Updated:	Jan 27 2011 10:11AM
Credit:	Jordi Chancel
Vulnerable:	Opera Software Opera Web Browser 11.00 Opera Software Opera Web Browser 10.63 Opera Software Opera Web Browser 10.62 Opera Software Opera Web Browser 10.62 Opera Software Opera Web Browser 10.61 Opera Software Opera Web Browser 10.60 Opera Software Opera Web Browser 10.60 Opera Software Opera Web Browser 10.54 Opera Software Opera Web Browser 10.53 Opera Software Opera Web Browser 10.52 Opera Software Opera Web Browser 10.51 Opera Software Opera Web Browser 10.50 Opera Software Opera Web Browser 10.10 Opera Software Opera Web Browser 10.1 Opera Software Opera Web Browser 10.00 Opera Software Opera Web Browser 10
Not Vulnerable:	Opera Software Opera Web Browser 11.01

Opera Web Browser 'Select' HTML Element Integer Overflow Vulnerability

Opera Web Browser is prone to a remote integer-overflow vulnerability.

Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions.

Opera Web Browser versions prior to 11.01 are vulnerable.

Opera Web Browser 'Select' HTML Element Integer Overflow Vulnerability

A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.

Opera Web Browser 'Select' HTML Element Integer Overflow Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Opera Web Browser 'Select' HTML Element Integer Overflow Vulnerability

References:

• Opera Homepage (Opera Software)
  
• Opera Release Notes - Security Update (Opera Software)