Description
Opera allows remote attackers to cause a denial of service (invalid memory reference and application crash) via a web page or HTML email that contains a TBODY tag with a large COL SPAN value, as demonstrated by mangleme.
References
- 20041018 Web browsers - a mini-farce mailing-list
- opera-colspan-tbody-dos(17806) vdb-entry
- 11441 vdb-entry
- 20041018 Web browsers - a mini-farce mailing-list
- http://lcamtuf.coredump.cx/mangleme/gallery/