Description
Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large height and width values, which causes less memory to be allocated than intended.
References
- SUSE-SA:2006:038 vendor-advisory
- 20897 third-party-advisory
- 18594 vdb-entry
- 20060622 VigilantMinds Advisory: Opera JPEG Processing Integer Overflow Vulnerability (VMSA-20060621-01) mailing-list
- ADV-2006-2491 vdb-entry
- 20787 third-party-advisory
- 1133 third-party-advisory
- 1016362 vdb-entry
- http://www.vigilantminds.com/advi_detail.php?id=45
- opera-jpeg-bo(27318) vdb-entry