Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Opera Web浏览器URI标签解析堆溢出漏洞
Vulnerability Description
Opera是挪威欧朋(Opera Software)公司所开发的一款Web浏览器,它支持多窗口浏览、可定制用户界面等。 Opera浏览器在解析包含有URL的标签时存在堆溢出漏洞,成功利用这个漏洞的攻击者可能以登录用户的权限执行任意代码,失败的攻击也可能导致浏览器崩溃。 在解析过程中分配了256字节的堆缓冲区,但没有经过长度检查便将标签的URL拷贝到了这个缓冲区。C/C++的漏洞代码如下: char *local_url = malloc(256); strcpy(local_url, tag_url);
CVSS Information
N/A
Vulnerability Type
N/A