Vulnerability-Lookup

CVE-2007-0126 (GCVE-0-2007-0126)

Vulnerability from cvelistv5 – Published: 2007-01-09 02:00 – Updated: 2024-08-07 12:03

Summary

Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

11 references

URL	Tags
http://osvdb.org/31574	vdb-entryx_refsource_OSVDB
http://securitytracker.com/id?1017473	vdb-entryx_refsource_SECTRACK
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/23613	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/0060	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/23739	third-party-advisoryx_refsource_SECUNIA
http://labs.idefense.com/intelligence/vulnerabili…	third-party-advisoryx_refsource_IDEFENSE
http://www.gentoo.org/security/en/glsa/glsa-20070…	vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/23771	third-party-advisoryx_refsource_SECUNIA
http://lists.suse.com/archive/suse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.opera.com/support/search/supsearch.dml…	x_refsource_CONFIRM

Date Public

2007-01-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:03:37.147Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "31574",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/31574"
          },
          {
            "name": "1017473",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1017473"
          },
          {
            "name": "opera-jpeg-dht-bo(31305)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31305"
          },
          {
            "name": "23613",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23613"
          },
          {
            "name": "ADV-2007-0060",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0060"
          },
          {
            "name": "23739",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23739"
          },
          {
            "name": "20070105 Opera Software Opera Web Browser JPG Image DHT Marker Heap Corruption Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457"
          },
          {
            "name": "GLSA-200701-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml"
          },
          {
            "name": "23771",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23771"
          },
          {
            "name": "SUSE-SA:2007:009",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.opera.com/support/search/supsearch.dml?index=852"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-01-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "31574",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/31574"
        },
        {
          "name": "1017473",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1017473"
        },
        {
          "name": "opera-jpeg-dht-bo(31305)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31305"
        },
        {
          "name": "23613",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23613"
        },
        {
          "name": "ADV-2007-0060",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0060"
        },
        {
          "name": "23739",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23739"
        },
        {
          "name": "20070105 Opera Software Opera Web Browser JPG Image DHT Marker Heap Corruption Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457"
        },
        {
          "name": "GLSA-200701-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml"
        },
        {
          "name": "23771",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23771"
        },
        {
          "name": "SUSE-SA:2007:009",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.opera.com/support/search/supsearch.dml?index=852"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0126",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "31574",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/31574"
            },
            {
              "name": "1017473",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1017473"
            },
            {
              "name": "opera-jpeg-dht-bo(31305)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31305"
            },
            {
              "name": "23613",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23613"
            },
            {
              "name": "ADV-2007-0060",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0060"
            },
            {
              "name": "23739",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23739"
            },
            {
              "name": "20070105 Opera Software Opera Web Browser JPG Image DHT Marker Heap Corruption Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457"
            },
            {
              "name": "GLSA-200701-08",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml"
            },
            {
              "name": "23771",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23771"
            },
            {
              "name": "SUSE-SA:2007:009",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html"
            },
            {
              "name": "http://www.opera.com/support/search/supsearch.dml?index=852",
              "refsource": "CONFIRM",
              "url": "http://www.opera.com/support/search/supsearch.dml?index=852"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0126",
    "datePublished": "2007-01-09T02:00:00.000Z",
    "dateReserved": "2007-01-08T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:03:37.147Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-0126",
      "date": "2026-09-27",
      "epss": "0.11044",
      "percentile": "0.9577"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
                  "matchCriteriaId": "98E48C83-01AE-4A33-A004-14B99792674C",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker."
        },
        {
          "lang": "es",
          "value": "Desbordamiento de b\u00fafer basado en mont\u00f3n en Opera 9.02 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante un archivo JPEG con un n\u00famero inv\u00e1lido de bytes de \u00edndice en el marcador de Definici\u00f3n de Tabla Huffman (Define Huffman Table o DHT)."
        }
      ],
      "id": "CVE-2007-0126",
      "lastModified": "2024-11-21T00:25:02.127",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "MEDIUM",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 9.3,
              "confidentialityImpact": "COMPLETE",
              "integrityImpact": "COMPLETE",
              "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 8.6,
            "impactScore": 10.0,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": true
          }
        ]
      },
      "published": "2007-01-09T02:28:00.000",
      "references": [
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://osvdb.org/31574"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/23613"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/23739"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/23771"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://securitytracker.com/id?1017473"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://www.opera.com/support/search/supsearch.dml?index=852"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.vupen.com/english/advisories/2007/0060"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31305"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://osvdb.org/31574"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/23613"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/23739"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/23771"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://securitytracker.com/id?1017473"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://www.opera.com/support/search/supsearch.dml?index=852"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2007/0060"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31305"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-119"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
                    "matchCriteriaId": "98E48C83-01AE-4A33-A004-14B99792674C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker."
          },
          {
            "lang": "es",
            "value": "Desbordamiento de b\u00fafer basado en mont\u00f3n en Opera 9.02 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante un archivo JPEG con un n\u00famero inv\u00e1lido de bytes de \u00edndice en el marcador de Definici\u00f3n de Tabla Huffman (Define Huffman Table o DHT)."
          }
        ],
        "id": "CVE-2007-0126",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 9.3,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 10.0,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": true
            }
          ]
        },
        "published": "2007-01-09T02:28:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://osvdb.org/31574"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/23613"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/23739"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/23771"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://securitytracker.com/id?1017473"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.opera.com/support/search/supsearch.dml?index=852"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2007/0060"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31305"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://osvdb.org/31574"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/23613"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/23739"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/23771"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1017473"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.opera.com/support/search/supsearch.dml?index=852"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2007/0060"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31305"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-119"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-05-02T01:42:28Z",
      "cve": "CVE-2007-0126",
      "id": "CVE-2007-0126",
      "initial_release_date": "2023-02-15T06:13:22Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2007-0126",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2007-0126.json",
      "version": "5"
    }
  }
}

CERTA-2007-AVI-013

Vulnerability from certfr_avis - Published: - Updated:

None

Description

Deux vulnérabilités ont été identifiées dans le navigateur Web Opera.

La première concerne la manipulation par le navigateur des images au format JPG (pour Joint Photographic Experts Group). Il n'interpréterait pas correctement le marqueur DHT (Define Huffman Table(s)) d'une image, servant à la compression (ou décompression) de celle-ci. Un site compromis pourrait donc contenir sur une page une image JPG spécialement construite. La visite de cette page provoquerait sur le poste du visiteur un mauvais fonctionnement du navigateur, voire une exécution de code arbitraire.

La seconde concerne la manipulation par le navigateur des images au format SVG (pour Scalable Vector Graphics). Il ne vérifierait pas le paramètre passé à la fonction Javavascript createSVGTransformFromMatrix. Un site compromis pourrait donc contenir sur une page une image SVG spécialement construite. La visite de cette page via un navigateur ayant Javascript activé provoquerait sur le poste du visiteur l'exécution de code arbitraire avec les droits de ce dernier.

Solution

Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les versions du navigateur Opera antérieures à la 9.10.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

CERTA-2007-AVI-013

Vulnerability from certfr_avis - Published: - Updated:

None

Description

Deux vulnérabilités ont été identifiées dans le navigateur Web Opera.

Solution

Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les versions du navigateur Opera antérieures à la 9.10.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

FKIE_CVE-2007-0126

Vulnerability from fkie_nvd - Published: 2007-01-09 02:28 - Updated: 2026-06-16 22:34

Severity

Summary

Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker.

References

URL	Tags
cve@mitre.org	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457	Vendor Advisory
cve@mitre.org	http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html
cve@mitre.org	http://osvdb.org/31574
cve@mitre.org	http://secunia.com/advisories/23613	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/23739
cve@mitre.org	http://secunia.com/advisories/23771
cve@mitre.org	http://securitytracker.com/id?1017473
cve@mitre.org	http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml
cve@mitre.org	http://www.opera.com/support/search/supsearch.dml?index=852	Patch, Vendor Advisory
cve@mitre.org	http://www.vupen.com/english/advisories/2007/0060
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/31305
af854a3a-2127-422b-91ae-364da2661108	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/31574
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23613	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23739
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/23771
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1017473
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.opera.com/support/search/supsearch.dml?index=852	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/0060
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/31305

Impacted products

	Vendor	Product	Version
	opera	opera_browser	9.02

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
              "matchCriteriaId": "98E48C83-01AE-4A33-A004-14B99792674C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en mont\u00f3n en Opera 9.02 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante un archivo JPEG con un n\u00famero inv\u00e1lido de bytes de \u00edndice en el marcador de Definici\u00f3n de Tabla Huffman (Define Huffman Table o DHT)."
    }
  ],
  "id": "CVE-2007-0126",
  "lastModified": "2026-06-16T22:34:57.940",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2007-01-09T02:28:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/31574"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23613"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23739"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/23771"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1017473"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.opera.com/support/search/supsearch.dml?index=852"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/0060"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31305"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/31574"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/23613"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23739"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/23771"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1017473"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.opera.com/support/search/supsearch.dml?index=852"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/0060"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31305"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-R4H9-924F-28V7

Vulnerability from github – Published: 2022-05-01 17:41 – Updated: 2022-05-01 17:41

Details

Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-0126"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-01-09T02:28:00Z",
    "severity": "HIGH"
  },
  "details": "Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker.",
  "id": "GHSA-r4h9-924f-28v7",
  "modified": "2022-05-01T17:41:49Z",
  "published": "2022-05-01T17:41:49Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0126"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31305"
    },
    {
      "type": "WEB",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457"
    },
    {
      "type": "WEB",
      "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/31574"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23613"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23739"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/23771"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1017473"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.opera.com/support/search/supsearch.dml?index=852"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/0060"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2007-0126

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker.

Aliases

CVE-2007-0126

Aliases

CVE-2007-0126

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2007-0126",
    "description": "Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker.",
    "id": "GSD-2007-0126",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-0126.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-0126"
      ],
      "details": "Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker.",
      "id": "GSD-2007-0126",
      "modified": "2023-12-13T01:21:35.229835Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2007-0126",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "31574",
            "refsource": "OSVDB",
            "url": "http://osvdb.org/31574"
          },
          {
            "name": "1017473",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1017473"
          },
          {
            "name": "opera-jpeg-dht-bo(31305)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31305"
          },
          {
            "name": "23613",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23613"
          },
          {
            "name": "ADV-2007-0060",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/0060"
          },
          {
            "name": "23739",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23739"
          },
          {
            "name": "20070105 Opera Software Opera Web Browser JPG Image DHT Marker Heap Corruption Vulnerability",
            "refsource": "IDEFENSE",
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457"
          },
          {
            "name": "GLSA-200701-08",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml"
          },
          {
            "name": "23771",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/23771"
          },
          {
            "name": "SUSE-SA:2007:009",
            "refsource": "SUSE",
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html"
          },
          {
            "name": "http://www.opera.com/support/search/supsearch.dml?index=852",
            "refsource": "CONFIRM",
            "url": "http://www.opera.com/support/search/supsearch.dml?index=852"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0126"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20070105 Opera Software Opera Web Browser JPG Image DHT Marker Heap Corruption Vulnerability",
              "refsource": "IDEFENSE",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457"
            },
            {
              "name": "http://www.opera.com/support/search/supsearch.dml?index=852",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.opera.com/support/search/supsearch.dml?index=852"
            },
            {
              "name": "23613",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/23613"
            },
            {
              "name": "1017473",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1017473"
            },
            {
              "name": "GLSA-200701-08",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml"
            },
            {
              "name": "SUSE-SA:2007:009",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html"
            },
            {
              "name": "23739",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23739"
            },
            {
              "name": "23771",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/23771"
            },
            {
              "name": "31574",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/31574"
            },
            {
              "name": "ADV-2007-0060",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/0060"
            },
            {
              "name": "opera-jpeg-dht-bo(31305)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31305"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2017-07-29T01:29Z",
      "publishedDate": "2007-01-09T02:28Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2007-0126 (GCVE-0-2007-0126)

CERTA-2007-AVI-013

Description

Solution

CERTA-2007-AVI-013

Description

Solution

FKIE_CVE-2007-0126

GHSA-R4H9-924F-28V7

GSD-2007-0126

Tags

Sightings

Nomenclature

Related by attack behaviour