CVE-2003-0870

Opera Browser 7.11 and 7.20 - Remote Code Execution via Escaped Characters in HREF Server Name

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2003-0870. PoCs published by @stake.

AI-analyzed exploit summary The provided text describes a vulnerability in Opera web browser (CVE-2003-0870) involving a buffer overflow triggered by malformed HTML HREF values. The example shows a malicious HREF attribute that could lead to remote code execution if exploited successfully.

Description

Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name.

Exploits (1)

exploitdb WRITEUP VERIFIED
by @stake · textdosmultiple
https://www.exploit-db.com/exploits/23263

The provided text describes a vulnerability in Opera web browser (CVE-2003-0870) involving a buffer overflow triggered by malformed HTML HREF values. The example shows a malicious HREF attribute that could lead to remote code execution if exploited successfully.

Classification
Writeup 80%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: Opera web browser (versions affected in 2003)
No auth needed
Prerequisites: Victim must visit a malicious webpage or open a malicious HTML email in Opera
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/8853
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/13458
Broken Link mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0016.html
Exploit, Patch, Vendor Advisory vendor-advisory x_refsource_atstake
http://www.atstake.com/research/advisories/2003/a102003-1.txt

Scores

EPSS 0.1506
EPSS Percentile 96.3%

Details

CWE
CWE-787
Status published
Products (2)
opera/opera_browser 7.11
opera/opera_browser 7.20
Published Nov 17, 2003
Tracked Since Feb 18, 2026