Opera Web Browser Tree Traversing Use-After-Free Memory Corruption Vulnerability

Bugtraq ID:	50320
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 21 2011 12:00AM
Updated:	Oct 25 2011 05:02PM
Credit:	Roberto Suggi Liverani
Vulnerable:	Opera Opera Web Browser 11.51
Not Vulnerable:	Opera Opera Web Browser 11.52

Opera Web Browser Tree Traversing Use-After-Free Memory Corruption Vulnerability

Opera Web Browser is prone to a remote memory-corruption vulnerability.

Successful exploits may allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.

Opera 11.51 is vulnerable. Other versions may also be affected.

Opera Web Browser Tree Traversing Use-After-Free Memory Corruption Vulnerability

The following proof-of-concept code is available:

• /data/vulnerabilities/exploits/50320.html

Opera Web Browser Tree Traversing Use-After-Free Memory Corruption Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Opera Web Browser Tree Traversing Use-After-Free Memory Corruption Vulnerability

References:

• Opera Homepage (Opera Software)
  
• Opera Use After Free - Crash PoC (Roberto Suggi Liverani)