Opera 7.10 Permanent Denial Of Service Vulnerability

Bugtraq ID:	7430
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 24 2003 12:00AM
Updated:	Apr 24 2003 12:00AM
Credit:	The discovery of this vulnerability has been credited to "David F. Madrid" <[email protected]>.
Vulnerable:	Opera Software Opera Web Browser 7.11 Opera Software Opera Web Browser 7.10
Not Vulnerable:

Opera 7.10 Permanent Denial Of Service Vulnerability

Allegedly, a vulnerability exists in Opera 7.10 that may result in a denial of service. The problem reportedly occurs when processing a 'news:' URL of excessive length. It has been reported that this issue will trigger a condition that will prevent Opera from functioning until the program has been reinstalled.

Opera 7.10 Permanent Denial Of Service Vulnerability

The following proof of concept URL has been provided:

news:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...

Opera 7.10 Permanent Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Opera 7.10 Permanent Denial Of Service Vulnerability

References:

• Opera Web Browser Home Page (Opera Software)
  
• Permanent crash in Opera 7.10 ("David F. Madrid" )
  
• Re: Permanent crash in Opera 7.10 (Dmitrij Lukasevic )