CVE-2003-0870

Description

Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name.

Affected products

• opera / opera_browser7.11 – 7.11
• opera / opera_browser7.20 – 7.20

Exploits & proofs of concept

• exploit-dbOpera 7.11/7.20 HREF - Malformed Server Name Heap Corruptionby @stake

References

• MISChttp://www.securityfocus.com/bid/8853
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/13458
• MISChttp://archives.neohapsis.com/archives/vulnwatch/2003-q4/0016.html
• VENDOR_ADVISORYhttp://www.atstake.com/research/advisories/2003/a102003-1.txt