Sid 1-49115
Message
BROWSER-OTHER Opera GIF parsing buffer overflow attempt
Summary
This event is generated when an attacker attempts to exploit a buffer overflow vulnerability in Opera.
Impact
Attempted User Privilege Gain
CVE-2012-6470:
CVSS base score 9.3
CVSS impact score 10.0
CVSS exploitability score 8.6
Confidentiality Impact COMPLETE
Integrity Impact COMPLETE
Availability Impact COMPLETE
Detailed information
Rule checks for attempts to exploit a buffer overflow vulnerability in Opera.
CVE-2012-6470: Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a malformed image.
Affected systems
- opera opera_browser 1.00
- opera opera_browser 2.00
- opera opera_browser 2.10
- opera opera_browser 2.12
- opera opera_browser 3.00
- opera opera_browser 3.10
- opera opera_browser 3.21
- opera opera_browser 3.50
- opera opera_browser 3.51
- opera opera_browser 3.60
- opera opera_browser 3.61
- opera opera_browser 3.62
- opera opera_browser 4.00
- opera opera_browser 4.01
- opera opera_browser 4.02
- opera opera_browser 5.0
- opera opera_browser 5.02
- opera opera_browser 5.10
- opera opera_browser 5.11
- opera opera_browser 5.12
- opera opera_browser 6.0
- opera opera_browser 6.01
- opera opera_browser 6.1
- opera opera_browser 6.02
- opera opera_browser 6.03
- opera opera_browser 6.04
- opera opera_browser 6.05
- opera opera_browser 6.06
- opera opera_browser 6.11
- opera opera_browser 6.12
- opera opera_browser 7.0
- opera opera_browser 7.01
- opera opera_browser 7.02
- opera opera_browser 7.03
- opera opera_browser 7.10
- opera opera_browser 7.11
- opera opera_browser 7.20
- opera opera_browser 7.21
- opera opera_browser 7.22
- opera opera_browser 7.23
- opera opera_browser 7.50
- opera opera_browser 7.51
- opera opera_browser 7.52
- opera opera_browser 7.53
- opera opera_browser 7.54
- opera opera_browser 7.60
- opera opera_browser 8.0
- opera opera_browser 8.01
- opera opera_browser 8.02
- opera opera_browser 8.50
- opera opera_browser 8.51
- opera opera_browser 8.52
- opera opera_browser 8.53
- opera opera_browser 8.54
- opera opera_browser 9.0
- opera opera_browser 9.01
- opera opera_browser 9.02
- opera opera_browser 9.10
- opera opera_browser 9.12
- opera opera_browser 9.20
- opera opera_browser 9.21
- opera opera_browser 9.22
- opera opera_browser 9.23
- opera opera_browser 9.24
- opera opera_browser 9.25
- opera opera_browser 9.26
- opera opera_browser 9.27
- opera opera_browser 9.50
- opera opera_browser 9.51
- opera opera_browser 9.52
- opera opera_browser 9.60
- opera opera_browser 9.61
- opera opera_browser 9.62
- opera opera_browser 9.63
- opera opera_browser 9.64
- opera opera_browser 10.00
- opera opera_browser 10.01
- opera opera_browser 10.10
- opera opera_browser 10.11
- opera opera_browser 10.20
- opera opera_browser 10.50
- opera opera_browser 10.51
- opera opera_browser 10.52
- opera opera_browser 10.53
- opera opera_browser 10.54
- opera opera_browser 10.60
- opera opera_browser 10.61
- opera opera_browser 10.62
- opera opera_browser 10.63
- opera opera_browser 11.00
- opera opera_browser 11.01
- opera opera_browser 11.10
- opera opera_browser 11.11
- opera opera_browser 11.50
- opera opera_browser 11.51
- opera opera_browser 11.52
- opera opera_browser 11.52.1100
- opera opera_browser 11.60
- opera opera_browser 11.61
- opera opera_browser 11.62
- opera opera_browser 11.64
- opera opera_browser 11.65
- opera opera_browser 11.66
- opera opera_browser 12.00
- opera opera_browser 12.01
- opera opera_browser 12.02
- opera opera_browser 12.10
- opera opera_browser 12.11
Ease of attack
CVE-2012-6470:
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE
False positives
Not known
False negatives
Not known
Corrective action
Contributors
- Cisco Talos Intelligence Group
Additional References