CVE-2012-1003

Opera < 11.60 - Denial of Service via Integer Overflow in Array Functions

Title source: llm

Description

Multiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of service (application crash) via a large integer argument to the (1) Int32Array, (2) Float32Array, (3) Float64Array, (4) Uint32Array, (5) Int16Array, or (6) ArrayBuffer function. NOTE: the vendor reportedly characterizes this as "a stability issue, not a security issue."

References (2)

Core 2

Core References

Exploit x_refsource_misc

http://blog.vulnhunt.com/index.php/2012/02/02/cal-2012-0004-opera-array-integer-overflow/

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/73027

Scores

EPSS 0.0048

EPSS Percentile 65.3%

Details

CWE

CWE-189

Status published

Products (29)

opera/opera_browser 5.0 (8 CPE variants)

opera/opera_browser 5.02

opera/opera_browser 5.10

opera/opera_browser 5.11

opera/opera_browser 5.12

opera/opera_browser 6.0 (7 CPE variants)

opera/opera_browser 6.1 (2 CPE variants)

opera/opera_browser 6.01

opera/opera_browser 6.02

opera/opera_browser 6.03

... and 19 more

Published Feb 07, 2012

Tracked Since Feb 18, 2026