Vulnerability Description
Multiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of service (application crash) via a large integer argument to the (1) Int32Array, (2) Float32Array, (3) Float64Array, (4) Uint32Array, (5) Int16Array, or (6) ArrayBuffer function. NOTE: the vendor reportedly characterizes this as "a stability issue, not a security issue."
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Opera | Opera Browser | <= 11.60 |
Related Weaknesses (CWE)
References
- http://blog.vulnhunt.com/index.php/2012/02/02/cal-2012-0004-opera-array-integer-Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73027
- http://blog.vulnhunt.com/index.php/2012/02/02/cal-2012-0004-opera-array-integer-Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73027
FAQ
What is CVE-2012-1003?
CVE-2012-1003 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Multiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of service (application crash) via a large integer argument to the (1) Int32Array, (2) Float32Array, (3) ...
How severe is CVE-2012-1003?
CVE-2012-1003 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-1003?
Check the references section above for vendor advisories and patch information. Affected products include: Opera Opera Browser.