CVE-2010-1993 - Opera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (resource consumption) via an HTML document with many IFRAME elements

Back Back to CVE browser

MEDIUM

Opera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (resource consumption) via an HTML document with many IFRAME elements

Published May 20, 2010

5.0

MEDIUM

CVSS 2.0

EPSS 2.28%

Description

Opera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (resource consumption) via an HTML document with many IFRAME elements.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-399

References (5)

http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
vendor-advisoryx_refsource_SUSE
http://websecurity.com.ua/4206/
x_refsource_MISCExploit
http://www.securityfocus.com/archive/1/511327/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-2012
Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11952
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html		vendor-advisoryx_refsource_SUSE
http://websecurity.com.ua/4206/		x_refsource_MISCExploit
http://www.securityfocus.com/archive/1/511327/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-2012		Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11952		vdb-entrysignaturex_refsource_OVAL