CVE-2009-2540

Published: Jul 20, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Opera, possibly 9.64 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.

Affected (1)

Products: Opera: Opera Browser

Opera

1 product

Opera Browser

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opera Opera Browser	Up to 9.64

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (16)

http://www.exploit-db.com/exploits/9160

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://www.g-sec.lu/one-bug-to-rule-them-all.html

Source: cve@mitre.org

Broken LinkExploit

http://www.securityfocus.com/archive/1/504969/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/504988/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/504989/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/505006/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/52874

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5957

Source: cve@mitre.org

Broken Link

http://www.exploit-db.com/exploits/9160