CVE-2009-3831

Opera Browser < 10.01 - Out-of-Bounds Write

Title source: rule

Description

Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted domain name.

References (10)

[Broken Link] http://secunia.com/advisories/37182

[Broken Link, Vendor Advisory] http://www.opera.com/docs/changelogs/mac/1001/

[Broken Link, Vendor Advisory] http://www.opera.com/docs/changelogs/unix/1001/

[Broken Link, Vendor Advisory] http://www.opera.com/docs/changelogs/windows/1001/

[Broken Link, Vendor Advisory] http://www.opera.com/support/kb/view/938/

[Broken Link] http://www.osvdb.org/59357

[Broken Link, Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/36850

[Broken Link, Vendor Advisory] http://www.vupen.com/english/advisories/2009/3073

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/54020

[Tool Signature] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6574

Scores

EPSS 0.0734

EPSS Percentile 91.6%

Classification

CWE

CWE-787

Status draft

Affected Products (1)

opera/opera_browser < 10.01

Timeline

Published Oct 30, 2009

Tracked Since Feb 18, 2026