CVE-2008-5178

Opera 9.62 - Remote Code Execution via Long file:// URI

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-5178. PoCs published by Guido Landi.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Opera 9.62 on Windows XP SP3. It uses a long string to overwrite memory and executes shellcode to launch calc.exe via a heap spray technique.

Description

Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI. NOTE: this might overlap CVE-2008-5680.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Guido Landi · htmllocalwindows

https://www.exploit-db.com/exploits/7135

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in Opera 9.62 on Windows XP SP3. It uses a long string to overwrite memory and executes shellcode to launch calc.exe via a heap spray technique.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Opera 9.62

No auth needed

Prerequisites: Victim must visit a malicious webpage using Opera 9.62 on Windows XP SP3

MITRE ATT&CK