CVE-2010-1349
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Opera是挪威欧朋（Opera Software）公司所开发的一款Web浏览器，它支持多窗口浏览、可定制用户界面等。 Opera浏览器在处理包含有畸形Content-Length头的HTTP响应时存在堆溢出漏洞。如果HTTP响应中包含有超长的64位Content-Length值且高32位部分为负数，就可能触发越界数组访问，导致执行任意代码。
Public Exploits 1
ExploitDB · 1
EDB-11622 [dos]
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2010-1349
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Opera Web浏览器Content-Length堆溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Opera是挪威欧朋（Opera Software）公司所开发的一款Web浏览器，它支持多窗口浏览、可定制用户界面等。 Opera浏览器在处理包含有畸形Content-Length头的HTTP响应时存在堆溢出漏洞。如果HTTP响应中包含有超长的64位Content-Length值且高32位部分为负数，就可能触发越界数组访问，导致执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2010-1349
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-1349
请登录查看更多情报信息。
Vendor Advisories for CVE-2010-1349 (6)
Exploits & Public PoCs for CVE-2010-1349 (1)
Security Blog Posts for CVE-2010-1349 (1)
Other References for CVE-2010-1349 (1)
-
http://www.opera.com/support/kb/view/948/ x_refsource_CONFIRM
Same Patch Batch · n/a · 2010-04-12 · 21 CVEs total
| CVE-2010-1149 | Freedesktop udisks 'probers/udisks-dm-export.c' 本地信息泄露漏洞 | |
| CVE-2010-1348 | IBM WebSphere Portal登录程序未明漏洞 | |
| CVE-2010-1347 | IBM Systems Director Agent 不安全文件权限管理漏洞 | |
| CVE-2010-1148 | Linux Kernel cifs_create()函数空指针引用漏洞 | |
| CVE-2010-1354 | Joomla! 'VJDEO'组件目录遍历漏洞 | |
| CVE-2010-1353 | JWowjoomla 'LoginBox Pro'组件目录遍历漏洞 | |
| CVE-2010-1352 | JOOFORGE Jutebox组件目录遍历漏洞 | |
| CVE-2010-1351 | Nodesform多个PHP远程文件包含漏洞 | |
| CVE-2010-1350 | Joomla! 'com_jp_jobs'组件'id'参数SQL注入漏洞 | |
| CVE-2010-1152 | memcached 输入验证错误漏洞 | |
| CVE-2009-1564 | VMware VMnc编解码器HexTile编码视频块解析堆溢出漏洞 | |
| CVE-2010-1146 | Linux Kernel ReiserFS文件系统实现绕过安全限制漏洞 | |
| CVE-2010-1142 | VMware VMnc编解码器HexTile编码视频块解析堆溢出漏洞 | |
| CVE-2010-1141 | VMware VMnc编解码器HexTile编码视频块解析堆溢出漏洞 | |
| CVE-2010-1140 | VMware USB服务 特洛伊木马权限获取漏洞 | |
| CVE-2010-1139 | VMware vmrun格式化字符串漏洞 | |
| CVE-2010-1138 | VMware 虚拟网络堆栈远程攻击敏感信息泄露漏洞 | |
| CVE-2010-0741 | Linux kernel 输入验证错误漏洞 | |
| CVE-2009-3732 | VMware Remote Console vmware-vmrc.exe 格式化字符串漏洞 | |
| CVE-2009-1565 | VMware VMnc HexTile编码视频块多个堆溢出漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2010-1349
No comments yet