CVE-2011-2632 — Improper Input Validation in Browser

CWE-20 — Improper Input Validation5 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
0.5%
top 34.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Opera Browser
Timeline
PublishedJul 1
Latest updateMay 17

Description

Opera before 11.11 does not properly handle destruction of a Silverlight instance, which allows remote attackers to cause a denial of service (application crash) via a web page, as demonstrated by vod.onet.pl.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDopera/opera_browser11.10+75

🔴Vulnerability Details

2
GHSA
GHSA-fjgc-43jr-cg35: Opera before 11↗2022-05-17
▶
CVEList
CVE-2011-2632: Opera before 11↗2011-07-01
▶

💥Exploits & PoCs

1
Nuclei
vsftpd < 2.3.3 - DoS
▶

📋Vendor Advisories

1
Red Hat
vsftpd: remote DoS via crafted glob pattern↗2011-03-01
▶
CVE-2011-2632 — Improper Input Validation in Browser | cvebase