Vulnerability-Lookup

CERTA-2007-AVI-363

Vulnerability from certfr_avis - Published: 2007-08-16 - Updated: 2007-08-27

Deux vulnérabilités dans Opera permettent à une personne malintentionnée d'exécuter du code arbitraire à distance ou d'usurper le contenu de la barre de navigation de l'application.

Description

Une faille a été identifiée dans Opera, due à une erreur non spécifiée lors du traitement de code Javascript. Une personne peut ainsi exécuter du code arbitraire à distance sur le poste d'un utilisateur visitant une page web spécifiquement conçue.

Une seconde vulnérabilité dans Opera est causée par une erreur dans le traitement des URI (Universal Ressource Identifier) de type data:. Elle permet à un utilisateur malintentionné d'usurper le contenu de la barre de navigation au moyen d'une URI speécialement construite.

Solution

La version 9.23 d'Opera corrige ce problème (cf. section Documentation).

Opera versions antérieures à 9.23.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Opera	None	vendor-advisory
Mise à jour Opera 9.23 :	-	other
Bulletin de sécurité Gentoo GLSA-200708-17 du 22 août 2007 :	-	other
Bulletin de sécurité SuSE SUSE-SR:2007:015 du 03 août 2007 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eOpera versions ant\u00e9rieures \u00e0 9.23.\u003c/P\u003e",
  "content": "## Description\n\nUne faille a \u00e9t\u00e9 identifi\u00e9e dans Opera, due \u00e0 une erreur non sp\u00e9cifi\u00e9e\nlors du traitement de code Javascript. Une personne peut ainsi ex\u00e9cuter\ndu code arbitraire \u00e0 distance sur le poste d\u0027un utilisateur visitant une\npage web sp\u00e9cifiquement con\u00e7ue.\n\nUne seconde vuln\u00e9rabilit\u00e9 dans Opera est caus\u00e9e par une erreur dans le\ntraitement des URI (Universal Ressource Identifier) de type data:. Elle\npermet \u00e0 un utilisateur malintentionn\u00e9 d\u0027usurper le contenu de la barre\nde navigation au moyen d\u0027une URI spe\u00e9cialement construite.\n\n## Solution\n\nLa version 9.23 d\u0027Opera corrige ce probl\u00e8me (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-3819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-3819"
    },
    {
      "name": "CVE-2007-4367",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-4367"
    }
  ],
  "initial_release_date": "2007-08-16T00:00:00",
  "last_revision_date": "2007-08-27T00:00:00",
  "links": [
    {
      "title": "Mise \u00e0 jour Opera 9.23 :",
      "url": "http://www.opera.com/download/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA-200708-17 du 22 ao\u00fbt 2007    :",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200708-17.xml"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 SuSE SUSE-SR:2007:015 du 03 ao\u00fbt 2007    :",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2007-08/msg00003.html"
    }
  ],
  "reference": "CERTA-2007-AVI-363",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-08-16T00:00:00.000000"
    },
    {
      "description": "ajout d\u0027une vuln\u00e9rabilit\u00e9, de la r\u00e9f\u00e9rence CVE et des bulletins de s\u00e9curit\u00e9 Gentoo et SuSE.",
      "revision_date": "2007-08-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Usurpation du contenue de la barre de navigation"
    }
  ],
  "summary": "Deux vuln\u00e9rabilit\u00e9s dans Opera permettent \u00e0 une personne malintentionn\u00e9e\nd\u0027ex\u00e9cuter du code arbitraire \u00e0 distance ou d\u0027usurper le contenu de la\nbarre de navigation de l\u0027application.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans Opera",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Opera",
      "url": "http://www.opera.com/support/search/view/865/"
    }
  ]
}

CVE-2007-3819 (GCVE-0-2007-3819)

Vulnerability from cvelistv5 – Published: 2007-07-17 01:00 – Updated: 2024-08-07 14:28

Summary

Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://alt.swiecki.net/oper1.html	x_refsource_MISC
	http://www.vupen.com/english/advisories/2007/2537	vdb-entryx_refsource_VUPEN
	http://www.securityfocus.com/archive/1/473782/100…	mailing-listx_refsource_BUGTRAQ
	http://secunia.com/advisories/26074	third-party-advisoryx_refsource_SECUNIA
	http://osvdb.org/38122	vdb-entryx_refsource_OSVDB
	http://www.securitytracker.com/id?1018397	vdb-entryx_refsource_SECTRACK
	http://security.gentoo.org/glsa/glsa-200708-17.xml	vendor-advisoryx_refsource_GENTOO
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://www.securityfocus.com/archive/1/473703/100…	mailing-listx_refsource_BUGTRAQ
	http://secunia.com/advisories/26545	third-party-advisoryx_refsource_SECUNIA
	http://www.securityfocus.com/bid/24917	vdb-entryx_refsource_BID
	http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
	http://securityreason.com/securityalert/2891	third-party-advisoryx_refsource_SREASON

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:28:52.493Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://alt.swiecki.net/oper1.html"
          },
          {
            "name": "ADV-2007-2537",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2537"
          },
          {
            "name": "20070716 Re: Opera/Konqueror: data: URL scheme address bar spoofing",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/473782/100/0/threaded"
          },
          {
            "name": "26074",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26074"
          },
          {
            "name": "38122",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/38122"
          },
          {
            "name": "1018397",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018397"
          },
          {
            "name": "GLSA-200708-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
          },
          {
            "name": "opera-konqueror-addressbar-spoofing(35430)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35430"
          },
          {
            "name": "20070713 Opera/Konqueror: data: URL scheme address bar spoofing",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/473703/100/0/threaded"
          },
          {
            "name": "26545",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26545"
          },
          {
            "name": "24917",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24917"
          },
          {
            "name": "SUSE-SR:2007:015",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
          },
          {
            "name": "2891",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/2891"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://alt.swiecki.net/oper1.html"
        },
        {
          "name": "ADV-2007-2537",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2537"
        },
        {
          "name": "20070716 Re: Opera/Konqueror: data: URL scheme address bar spoofing",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/473782/100/0/threaded"
        },
        {
          "name": "26074",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26074"
        },
        {
          "name": "38122",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/38122"
        },
        {
          "name": "1018397",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018397"
        },
        {
          "name": "GLSA-200708-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
        },
        {
          "name": "opera-konqueror-addressbar-spoofing(35430)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35430"
        },
        {
          "name": "20070713 Opera/Konqueror: data: URL scheme address bar spoofing",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/473703/100/0/threaded"
        },
        {
          "name": "26545",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26545"
        },
        {
          "name": "24917",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24917"
        },
        {
          "name": "SUSE-SR:2007:015",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
        },
        {
          "name": "2891",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/2891"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3819",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://alt.swiecki.net/oper1.html",
              "refsource": "MISC",
              "url": "http://alt.swiecki.net/oper1.html"
            },
            {
              "name": "ADV-2007-2537",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2537"
            },
            {
              "name": "20070716 Re: Opera/Konqueror: data: URL scheme address bar spoofing",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/473782/100/0/threaded"
            },
            {
              "name": "26074",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26074"
            },
            {
              "name": "38122",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/38122"
            },
            {
              "name": "1018397",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018397"
            },
            {
              "name": "GLSA-200708-17",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
            },
            {
              "name": "opera-konqueror-addressbar-spoofing(35430)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35430"
            },
            {
              "name": "20070713 Opera/Konqueror: data: URL scheme address bar spoofing",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/473703/100/0/threaded"
            },
            {
              "name": "26545",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26545"
            },
            {
              "name": "24917",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24917"
            },
            {
              "name": "SUSE-SR:2007:015",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
            },
            {
              "name": "2891",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/2891"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3819",
    "datePublished": "2007-07-17T01:00:00",
    "dateReserved": "2007-07-16T00:00:00",
    "dateUpdated": "2024-08-07T14:28:52.493Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-4367 (GCVE-0-2007-4367)

Vulnerability from cvelistv5 – Published: 2007-08-15 23:00 – Updated: 2024-08-07 14:53

Summary

Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.securitytracker.com/id?1018572	vdb-entryx_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2007/2904	vdb-entryx_refsource_VUPEN
	http://secunia.com/advisories/26635	third-party-advisoryx_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.opera.com/support/search/view/865/	x_refsource_CONFIRM
	http://security.gentoo.org/glsa/glsa-200708-17.xml	vendor-advisoryx_refsource_GENTOO
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://www.securityfocus.com/bid/25331	vdb-entryx_refsource_BID
	http://secunia.com/advisories/26545	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/26477	third-party-advisoryx_refsource_SECUNIA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:53:55.903Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1018572",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018572"
          },
          {
            "name": "ADV-2007-2904",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2904"
          },
          {
            "name": "26635",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26635"
          },
          {
            "name": "SUSE-SA:2007:050",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2007-08/msg00006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.opera.com/support/search/view/865/"
          },
          {
            "name": "GLSA-200708-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
          },
          {
            "name": "opera-javascript-code-execution(36039)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36039"
          },
          {
            "name": "25331",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25331"
          },
          {
            "name": "26545",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26545"
          },
          {
            "name": "26477",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26477"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-08-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a \"virtual function call on an invalid pointer.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1018572",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018572"
        },
        {
          "name": "ADV-2007-2904",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2904"
        },
        {
          "name": "26635",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26635"
        },
        {
          "name": "SUSE-SA:2007:050",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2007-08/msg00006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.opera.com/support/search/view/865/"
        },
        {
          "name": "GLSA-200708-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
        },
        {
          "name": "opera-javascript-code-execution(36039)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36039"
        },
        {
          "name": "25331",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25331"
        },
        {
          "name": "26545",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26545"
        },
        {
          "name": "26477",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26477"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-4367",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a \"virtual function call on an invalid pointer.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1018572",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018572"
            },
            {
              "name": "ADV-2007-2904",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2904"
            },
            {
              "name": "26635",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26635"
            },
            {
              "name": "SUSE-SA:2007:050",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2007-08/msg00006.html"
            },
            {
              "name": "http://www.opera.com/support/search/view/865/",
              "refsource": "CONFIRM",
              "url": "http://www.opera.com/support/search/view/865/"
            },
            {
              "name": "GLSA-200708-17",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
            },
            {
              "name": "opera-javascript-code-execution(36039)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36039"
            },
            {
              "name": "25331",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25331"
            },
            {
              "name": "26545",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26545"
            },
            {
              "name": "26477",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26477"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-4367",
    "datePublished": "2007-08-15T23:00:00",
    "dateReserved": "2007-08-15T00:00:00",
    "dateUpdated": "2024-08-07T14:53:55.903Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTA-2007-AVI-363

Description

Solution

CVE-2007-3819 (GCVE-0-2007-3819)

CVE-2007-4367 (GCVE-0-2007-4367)

Tags

Sightings

Nomenclature