CVE-2006-4819

critical

Description

Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address).

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/29632

http://www.vupen.com/english/advisories/2006/4066

http://www.securityfocus.com/bid/20591

http://www.opera.com/support/search/supsearch.dml?index=848

http://www.novell.com/linux/security/advisories/2006_61_opera.html

http://www.kb.cert.org/vuls/id/484380

http://securitytracker.com/id?1017080

http://secunia.com/advisories/22509

http://secunia.com/advisories/22218

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=424

Details

Source: Mitre, NVD

Published: 2006-10-17

Updated: 2025-04-09

Risk Information

CVSS v2

Base Score: 5.1

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.13457