CVE-2005-4718
Opera Browser < 8.02 - Denial of Service via Crafted HTML Style Attributes
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-4718. PoCs published by posidron.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Opera 8.2 on Windows XP SP2. It uses a malformed HTML file with excessive 'A' and 'B' characters to trigger a crash, potentially leading to arbitrary code execution.
Description
Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(0);" style attribute, a "bodyA" tag, a long string, and a "u" tag with a long attribute, as demonstrated by opera.html; and (2) a BGSOUND element with a "margin:-99;" STYLE attribute.
Exploits (2)
This exploit targets a buffer overflow vulnerability in Opera 8.2 on Windows XP SP2. It uses a malformed HTML file with excessive 'A' and 'B' characters to trigger a crash, potentially leading to arbitrary code execution.
This exploit targets a vulnerability in Opera 8.02 and below, leveraging malformed HTML tags to trigger a denial-of-service (DoS) condition. The PoC uses a combination of `<bdo>`, `<bgsound>`, and `<hr>` tags with invalid attributes to crash the browser.