CVE-2012-1003 — Browser vulnerability

CWE-1893 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.5%
top 34.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Opera Browser
Timeline
PublishedFeb 7
Latest updateMay 17

Description

Multiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of service (application crash) via a large integer argument to the (1) Int32Array, (2) Float32Array, (3) Float64Array, (4) Uint32Array, (5) Int16Array, or (6) ArrayBuffer function. NOTE: the vendor reportedly characterizes this as "a stability issue, not a security issue."

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDopera/opera_browser11.60+79

🔴Vulnerability Details

2
GHSA
GHSA-6pv3-9mxc-r3vx: Multiple integer overflows in Opera 11↗2022-05-17
▶
CVEList
CVE-2012-1003: Multiple integer overflows in Opera 11↗2012-02-07
▶
CVE-2012-1003 — Opera Browser vulnerability | cvebase