CVE-2007-3929

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2007-3929
Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object.

9.3 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=564 Broken Link Vendor Advisory
http://secunia.com/advisories/26138 Broken Link Patch
http://secunia.com/advisories/26545 Broken Link
http://security.gentoo.org/glsa/glsa-200708-17.xml Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_15_sr.html Broken Link
http://www.opera.com/support/search/view/862/ Broken Link Patch Vendor Advisory
http://www.securityfocus.com/bid/24970 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1018431 Broken Link Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2007/2584 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/35509 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
History

26 Feb 2022, 03:59

Type Values Removed Values Added
CPE cpe:2.3:a:opera_software:opera_web_browser:*:*:*:*:*:*:*:* cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
References (GENTOO) http://security.gentoo.org/glsa/glsa-200708-17.xml - (GENTOO) http://security.gentoo.org/glsa/glsa-200708-17.xml - Third Party Advisory
References (CONFIRM) http://www.opera.com/support/search/view/862/ - Patch, Vendor Advisory (CONFIRM) http://www.opera.com/support/search/view/862/ - Broken Link, Patch, Vendor Advisory
References (IDEFENSE) http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=564 - Vendor Advisory (IDEFENSE) http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=564 - Broken Link, Vendor Advisory
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/35509 - (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/35509 - Third Party Advisory, VDB Entry
References (VUPEN) http://www.vupen.com/english/advisories/2007/2584 - (VUPEN) http://www.vupen.com/english/advisories/2007/2584 - Broken Link
References (SECUNIA) http://secunia.com/advisories/26545 - Vendor Advisory (SECUNIA) http://secunia.com/advisories/26545 - Broken Link
References (BID) http://www.securityfocus.com/bid/24970 - (BID) http://www.securityfocus.com/bid/24970 - Broken Link, Third Party Advisory, VDB Entry
References (SUSE) http://www.novell.com/linux/security/advisories/2007_15_sr.html - (SUSE) http://www.novell.com/linux/security/advisories/2007_15_sr.html - Broken Link
References (SECUNIA) http://secunia.com/advisories/26138 - Patch, Vendor Advisory (SECUNIA) http://secunia.com/advisories/26138 - Broken Link, Patch
References (SECTRACK) http://www.securitytracker.com/id?1018431 - (SECTRACK) http://www.securitytracker.com/id?1018431 - Broken Link, Third Party Advisory, VDB Entry
First Time Opera
Opera opera Browser
CWE CWE-119 CWE-416
Information

Published : 2007-07-21 00:30

Updated : 2023-12-10 10:40

NVD link : CVE-2007-3929

Mitre link : CVE-2007-3929

CVE.ORG link : CVE-2007-3929

JSON object : View

Products Affected

opera

  • opera_browser
CWE
CWE-416

Use After Free