CVE-2012-1003

Multiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of service (application crash) via a large integer argument to the (1) Int32Array, (2) Float32Array, (3) Float64Array, (4) Uint32Array, (5) Int16Array, or (6) ArrayBuffer function. NOTE: the vendor reportedly characterizes this as "a stability issue, not a security issue."

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2012-02-07

Last modified

2024-08-06

Weaknesses

CWE-189

Affected products

• Opera Browser (Opera)

References

• http://blog.vulnhunt.com/index.php/2012/02/02/cal-2012-0004-opera-array-integer-overflow/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73027