Improper input validation in Opera Browser

CVE-2005-3946

Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument to the removeMember JNI method for the com.opera.JSObject class.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.032 (87.0th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (Exploit, x_refsource_MISC, Broken Link)
  • cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
  • cve@mitre.org (Broken Link, Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory, Broken Link)