SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2008-5679

The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 9.3
Exploit Score: 8.6
Impact Score: 10.0

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Reference:

SECTRACK-1021460

http://www.securityfocus.com/archive/1/499315/100/0/threaded

SECUNIA-34294

SREASON-4791

GLSA-200903-30

http://www.nruns.com/security_advisory_opera_html_parsing_code_execution.php

http://www.opera.com/docs/changelogs/linux/963/

http://www.opera.com/support/kb/view/921/


30479



423868



248149



909



194803



282