CVE-2011-2640

Opera < 11.10 - Denial of Service via Empty Java Applet Parameter

Title source: llm
STIX 2.1

Description

Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via an HTML document that has an empty parameter value for an embedded Java applet.

References (4)

Core 4
Core References
Vendor Advisory x_refsource_confirm
http://www.opera.com/docs/changelogs/windows/1110/
Vendor Advisory x_refsource_confirm
http://www.opera.com/docs/changelogs/mac/1110/
Vendor Advisory x_refsource_confirm
http://www.opera.com/docs/changelogs/unix/1110/
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/68452

Scores

EPSS 0.0073
EPSS Percentile 73.0%

Details

CWE
CWE-399
Status published
Products (30)
opera/opera_browser 5.0 (8 CPE variants)
opera/opera_browser 5.02
opera/opera_browser 5.10
opera/opera_browser 5.11
opera/opera_browser 5.12
opera/opera_browser 6.0 (6 CPE variants)
opera/opera_browser 6.1 (2 CPE variants)
opera/opera_browser 6.01
opera/opera_browser 6.02
opera/opera_browser 6.03
... and 20 more
Published Jul 01, 2011
Tracked Since Feb 18, 2026