← Back

CVE-2007-0127

nvd nist
Published: Jan 9, 2007Modified: Apr 23, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled pointer to be referenced during the virtual function call.

Affected (94)

Products: Opera: Opera Browser
1 product
Opera Browser
Configuration A
94 vulnerable
Vulnerable SoftwareAffected Versions
Opera
Up to 9.02
Version 1.00
Version 2.00
Version 2.10
Version 2.10 beta1
Version 2.10 beta2
Version 2.10 beta3
Version 2.12
Version 3.00
Version 3.00 beta
Version 3.10
Version 3.21
Version 3.50
Version 3.51
Version 3.60
Version 3.61
Version 3.62
Version 3.62 beta
Version 4.00
Version 4.00 beta2
Version 4.00 beta3
Version 4.00 beta4
Version 4.00 beta5
Version 4.00 beta6
Version 4.01
Version 4.02
Version 5.02
Version 5.0
Version 5.0 beta2
Version 5.0 beta3
Version 5.0 beta4
Version 5.0 beta5
Version 5.0 beta6
Version 5.0 beta7
Version 5.0 beta8
Version 5.10
Version 5.11
Version 5.12
Version 6.01
Version 6.02
Version 6.03
Version 6.04
Version 6.05
Version 6.06
Version 6.0
Version 6.0 beta1
Version 6.0 beta2
Version 6.0 tp1
Version 6.0 tp2
Version 6.0 tp3
Version 6.11
Version 6.12
Version 6.1
Version 6.1 beta1
Version 7.01
Version 7.02
Version 7.03
Version 7.0
Version 7.0 beta1
Version 7.0 beta1_v2
Version 7.0 beta2
Version 7.10
Version 7.10 beta1
Version 7.11
Version 7.11 beta2
Version 7.20
Version 7.20 beta7
Version 7.21
Version 7.22
Version 7.23
Version 7.50
Version 7.50 beta1
Version 7.51
Version 7.52
Version 7.53
Version 7.54
Version 7.54 update1
Version 7.54 update2
Version 7.60
Version 8.01
Version 8.02
Version 8.0
Version 8.0 beta1
Version 8.0 beta2
Version 8.0 beta3
Version 8.50
Version 8.51
Version 8.52
Version 8.53
Version 8.54
Version 9.01
Version 9.0
Version 9.0 beta1
Version 9.0 beta2

References (20)

Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.