CVE-2006-1834

medium · 5.1

Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem makes the attack easier with shorter strings.

5.1

CVSS

12.1%

EPSS (exploit prob.)

96th

EPSS percentile

2006-04-19

Published

AV:N/AC:H/Au:N/C:P/I:P/A:P

Weaknesses

CWE-189

Affected products

Vendor	Product	Affected versions
opera	opera_browser	<= 8.53
opera	opera_browser	1.00
opera	opera_browser	2.00
opera	opera_browser	2.10
opera	opera_browser	2.10
opera	opera_browser	2.10
opera	opera_browser	2.10
opera	opera_browser	2.12
opera	opera_browser	3.00
opera	opera_browser	3.00
opera	opera_browser	3.10
opera	opera_browser	3.21
opera	opera_browser	3.50
opera	opera_browser	3.51
opera	opera_browser	3.60
opera	opera_browser	3.61
opera	opera_browser	3.62
opera	opera_browser	3.62
opera	opera_browser	4.00
opera	opera_browser	4.00
opera	opera_browser	4.00
opera	opera_browser	4.00
opera	opera_browser	4.00
opera	opera_browser	4.00
opera	opera_browser	4.01
opera	opera_browser	4.02
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.02
opera	opera_browser	5.10
opera	opera_browser	5.11
opera	opera_browser	5.12
opera	opera_browser	6.0
opera	opera_browser	6.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-1834