Opera < 7.54 Empty Embedded Object DoS

medium Nessus Plugin ID 14638

Synopsis

The remote host has an application that is affected by a denial of service vulnerability.

Description

The version of Opera installed on the remote host contains a flaw that allows an attacker to crash this browser remotely.

To exploit this flaw, an attacker would need to craft a rogue website containing an embedded 'CCCC' object with an empty 'src' tag in it and would need to lure a victim to visit it.

Solution

Install Opera 7.54 or newer.

Plugin Details

Severity: Medium

ID: 14638

File Name: opera_empty_embedded_object.nasl

Version: 1.14

Type: local

Agent: windows

Family: Windows

Published: 9/2/2004

Updated: 8/8/2018

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: cpe:/a:opera:opera_browser

Required KB Items: SMB/Opera/Version

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 9/1/2004

Reference Information

BID: 11090

Detections

Analytics