CVE-2006-3353

Published: Jul 6, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-bounds memory access, related to an iframe and JavaScript that accesses certain style sheets properties.

Affected (1)

Products: Opera: Opera Browser

Opera

1 product

Opera Browser

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opera Opera Browser	Before 9.01

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (14)

http://echo.or.id/adv/adv35-y3dips-2006.txt

Source: cve@mitre.org

Broken LinkExploit

http://securityreason.com/securityalert/1185

Source: cve@mitre.org

Broken Link

http://www.osvdb.org/27511

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/archive/1/438872/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/18758

Source: cve@mitre.org

Broken LinkExploitThird Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/27531

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/1972

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://echo.or.id/adv/adv35-y3dips-2006.txt