CVE-2006-4819 — Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address)

Back Back to CVE browser

MEDIUM

Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address)

Published Oct 17, 2006

5.1

MEDIUM

CVSS 2.0

EPSS 4.92%

Description

Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address).

Affected products

Remediation

No remediation recorded yet.

Metrics

4.92% 0.04924

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.04924

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (15 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	4.92% (0.04924)	91.86th	v5 (v2026.06.15)
Jun 15, 2026	4.72% (0.04724)	90.64th	v5 (v2026.06.15)
Jan 2, 2026	15.58% (0.15585)	94.51th	v4 (v2025.03.14)
Mar 30, 2025	13.46% (0.13457)	93.59th	v4 (v2025.03.14)
Mar 29, 2025	11.57% (0.11571)	89.36th	v4 (v2025.03.14)
Mar 17, 2025	13.46% (0.13457)	93.66th	v4 (v2025.03.14)
Dec 17, 2024	22.83% (0.22832)	96.54th	v3 (v2023.03.01)
Aug 21, 2023	29.94% (0.29941)	96.34th	v3 (v2023.03.01)
Jul 14, 2023	32.48% (0.32475)	96.44th	v3 (v2023.03.01)
Jun 6, 2023	32.49% (0.32486)	96.40th	v3 (v2023.03.01)
Mar 21, 2023	25.77% (0.25768)	95.95th	v3 (v2023.03.01)
Mar 7, 2023	25.48% (0.25482)	95.92th	v3 (v2023.03.01)
Mar 6, 2023	9.92% (0.09915)	94.52th	v2 (v2022.01.01)
Apr 1, 2022	9.92% (0.09915)	94.04th	v2 (v2022.01.01)
Feb 4, 2022	9.92% (0.09915)	87.53th	v2 (v2022.01.01)

Weaknesses (1)

CWE-119

Buffer Overflow

References (10)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=424
third-party-advisoryx_refsource_IDEFENSEPatchVendor Advisory
http://secunia.com/advisories/22218
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/22509
third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1017080
vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/484380
third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.novell.com/linux/security/advisories/2006_61_opera.html
vendor-advisoryx_refsource_SUSE
http://www.opera.com/support/search/supsearch.dml?index=848
x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/bid/20591
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/4066
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/29632
vdb-entryx_refsource_XF

Link	Providers	Tags
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=424		third-party-advisoryx_refsource_IDEFENSEPatchVendor Advisory
http://secunia.com/advisories/22218		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/22509		third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1017080		vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/484380		third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.novell.com/linux/security/advisories/2006_61_opera.html		vendor-advisoryx_refsource_SUSE
http://www.opera.com/support/search/supsearch.dml?index=848		x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/bid/20591		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/4066		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/29632		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 17, 2006

Updated Aug 7, 2024

Reserved Sep 15, 2006

Link CVE-2006-4819

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-4819

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-4819