CVE-2007-6523

Algorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote attackers to cause a denial of service (CPU consumption) via a crafted bitmap (BMP) file that triggers a large number of calculations and checks.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:9.22:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:9.23:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:9.24:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:9.50:beta1:*:*:*:*:*:*

History

21 Nov 2024, 00:40

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html - () http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html -
References () http://secunia.com/advisories/28314 - () http://secunia.com/advisories/28314 -
References () http://securityreason.com/securityalert/3482 - () http://securityreason.com/securityalert/3482 -
References () http://www.securityfocus.com/archive/1/484605/100/200/threaded - () http://www.securityfocus.com/archive/1/484605/100/200/threaded -
References () http://www.securityfocus.com/bid/26721 - Exploit () http://www.securityfocus.com/bid/26721 - Exploit
References () http://www.vupen.com/english/advisories/2007/4261 - () http://www.vupen.com/english/advisories/2007/4261 -

Information

Published : 2007-12-24 20:46

Updated : 2024-11-21 00:40


NVD link : CVE-2007-6523

Mitre link : CVE-2007-6523

CVE.ORG link : CVE-2007-6523


JSON object : View

Products Affected

opera

  • opera_browser
CWE
CWE-189

Numeric Errors

CWE-399

Resource Management Errors