Vulnerability Name: | CVE-2010-1993 (CCN-58754) | ||||||||||||
Assigned: | 2010-05-17 | ||||||||||||
Published: | 2010-05-17 | ||||||||||||
Updated: | 2018-10-10 | ||||||||||||
Summary: | Opera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (resource consumption) via an HTML document with many IFRAME elements. | ||||||||||||
CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||||||
CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P) 4.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:U/RC:UR)
4.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:U/RC:UR)
| ||||||||||||
Vulnerability Type: | CWE-399 | ||||||||||||
Vulnerability Consequences: | Denial of Service | ||||||||||||
References: | Source: CCN Type: BugTraq Mailing List, Tue May 18 2010 - 08:17:50 CDT DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers Source: MITRE Type: CNA CVE-2010-1993 Source: SUSE Type: UNKNOWN SUSE-SR:2010:014 Source: CCN Type: Websecurity Blog, 23:50 17.05.2010 DoS ? Firefox, Internet Explorer, Chrome, Opera Source: MISC Type: Exploit http://websecurity.com.ua/4206/ Source: CCN Type: Opera Web site Opera Browser Source: CCN Type: OSVDB ID: 64784 Opera mailto: URL Multiple IFRAME Element Handling DoS Source: BUGTRAQ Type: UNKNOWN 20100518 DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers Source: XF Type: UNKNOWN opera-iframe-element-dos(58754) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:11952 | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||
Oval Definitions | |||||||||||||
| |||||||||||||
BACK |