CVE-2007-0126

Published: Jan 9, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker.

Affected (1)

Products: Opera: Opera Browser

Opera

1 product

Opera Browser

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opera Opera Browser	Version 9.02

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (22)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457

Source: cve@mitre.org

Vendor Advisory

http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html

Source: cve@mitre.org

http://osvdb.org/31574

Source: cve@mitre.org

http://secunia.com/advisories/23613

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23739

Source: cve@mitre.org

http://secunia.com/advisories/23771

Source: cve@mitre.org

http://securitytracker.com/id?1017473

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml

Source: cve@mitre.org

http://www.opera.com/support/search/supsearch.dml?index=852

Source: cve@mitre.org

PatchVendor Advisory

http://www.vupen.com/english/advisories/2007/0060

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/31305

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457