FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-4819

This CVE name corresponds to:

Entered	Topic
2006-10-20	opera -- URL parsing heap overflow vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-4819 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-4819
Phase	Assigned(20060915)

Description

Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address).

References

Source	Reference
IDEFENSE	20061017 Opera Software Opera Web Browser URL Parsing Heap Overflow Vulnerability
CONFIRM	http://www.opera.com/support/search/supsearch.dml?index=848
SUSE	SUSE-SA:2006:061
CERT-VN	VU#484380
BID	20591
VUPEN	ADV-2006-4066
SECTRACK	1017080
SECUNIA	22218
SECUNIA	22509
XF	opera-tag-url-bo(29632)