Executive Summary

Informations
Name	CVE-2009-0914	First vendor Publication	2009-03-16
Vendor	Cve	Last vendor Modification	2012-06-07

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0914

CWE : Common Weakness Enumeration

id	Name
CWE-399	Resource Management Errors

OVAL Definitions

 

Definition Id: oval:org.mitre.oval:def:6230
Oval ID:	oval:org.mitre.oval:def:6230
Title:	Opera Unspecified Vulnerability
Description:	Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-0914	Version:	2
Platform(s):	Microsoft Windows XP Microsoft Windows Vista	Product(s):	Opera Browser
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Opera version is less than 9.64 (9.64.10487.0)

 

Definition Id: oval:org.mitre.oval:def:5955
Oval ID:	oval:org.mitre.oval:def:5955
Title:	Opera Execution of arbitrary code Vulnerability
Description:	Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-0914	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Vista	Product(s):	Opera Browser
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Opera version is less than 9.64 (9.64.10487.0)

CPE : Common Platform Enumeration

Type	Description	Count
Application	Opera Opera Browser cpe:/a:opera:opera_browser:9.63 cpe:/a:opera:opera_browser:9.62 cpe:/a:opera:opera_browser:9.61 cpe:/a:opera:opera_browser:9.60 cpe:/a:opera:opera_browser:9.60:beta1 cpe:/a:opera:opera_browser:9.52 cpe:/a:opera:opera_browser:9.51 cpe:/a:opera:opera_browser:9.50:beta2 cpe:/a:opera:opera_browser:9.50:beta1 cpe:/a:opera:opera_browser:9.50 cpe:/a:opera:opera_browser:9.27 cpe:/a:opera:opera_browser:9.26 cpe:/a:opera:opera_browser:9.25 cpe:/a:opera:opera_browser:9.24 cpe:/a:opera:opera_browser:9.23 cpe:/a:opera:opera_browser:9.22 cpe:/a:opera:opera_browser:9.21 cpe:/a:opera:opera_browser:9.20:beta1 cpe:/a:opera:opera_browser:9.20 cpe:/a:opera:opera_browser:9.12 cpe:/a:opera:opera_browser:9.10 cpe:/a:opera:opera_browser:9.02 cpe:/a:opera:opera_browser:9.01 cpe:/a:opera:opera_browser:9.0:beta1 cpe:/a:opera:opera_browser:9.0:beta2 cpe:/a:opera:opera_browser:9.0 cpe:/a:opera:opera_browser:8.54 cpe:/a:opera:opera_browser:8.53 cpe:/a:opera:opera_browser:8.52 cpe:/a:opera:opera_browser:8.51 cpe:/a:opera:opera_browser:8.50 cpe:/a:opera:opera_browser:8.02 cpe:/a:opera:opera_browser:8.01 cpe:/a:opera:opera_browser:8.0:beta2 cpe:/a:opera:opera_browser:8.0:beta1 cpe:/a:opera:opera_browser:8.0:beta3 cpe:/a:opera:opera_browser:8.0 cpe:/a:opera:opera_browser:7.60 cpe:/a:opera:opera_browser:7.54 cpe:/a:opera:opera_browser:7.54:update2 cpe:/a:opera:opera_browser:7.54:update1 cpe:/a:opera:opera_browser:7.53 cpe:/a:opera:opera_browser:7.52 cpe:/a:opera:opera_browser:7.51 cpe:/a:opera:opera_browser:7.50:beta1 cpe:/a:opera:opera_browser:7.50 cpe:/a:opera:opera_browser:7.23 cpe:/a:opera:opera_browser:7.22 cpe:/a:opera:opera_browser:7.21 cpe:/a:opera:opera_browser:7.20:beta7 cpe:/a:opera:opera_browser:7.20 cpe:/a:opera:opera_browser:7.11 cpe:/a:opera:opera_browser:7.11:beta2 cpe:/a:opera:opera_browser:7.10 cpe:/a:opera:opera_browser:7.10:beta1 cpe:/a:opera:opera_browser:7.03 cpe:/a:opera:opera_browser:7.02 cpe:/a:opera:opera_browser:7.01 cpe:/a:opera:opera_browser:7.0:beta1 cpe:/a:opera:opera_browser:7.0 cpe:/a:opera:opera_browser:7.0:beta1_v2 cpe:/a:opera:opera_browser:7.0:beta2 cpe:/a:opera:opera_browser:6.12 cpe:/a:opera:opera_browser:6.11 cpe:/a:opera:opera_browser:6.1 cpe:/a:opera:opera_browser:6.1:beta1 cpe:/a:opera:opera_browser:6.06 cpe:/a:opera:opera_browser:6.05 cpe:/a:opera:opera_browser:6.04 cpe:/a:opera:opera_browser:6.03 cpe:/a:opera:opera_browser:6.02 cpe:/a:opera:opera_browser:6.01 cpe:/a:opera:opera_browser:6.0:tp1 cpe:/a:opera:opera_browser:6.0:beta1 cpe:/a:opera:opera_browser:6.0:beta2 cpe:/a:opera:opera_browser:6.0 cpe:/a:opera:opera_browser:6.0:tp2 cpe:/a:opera:opera_browser:6.0:tp3 cpe:/a:opera:opera_browser:5.12 cpe:/a:opera:opera_browser:5.11 cpe:/a:opera:opera_browser:5.10 cpe:/a:opera:opera_browser:5.02 cpe:/a:opera:opera_browser:5.0:beta2 cpe:/a:opera:opera_browser:5.0:beta6 cpe:/a:opera:opera_browser:5.0:beta5 cpe:/a:opera:opera_browser:5.0:beta7 cpe:/a:opera:opera_browser:5.0:beta4 cpe:/a:opera:opera_browser:5.0 cpe:/a:opera:opera_browser:5.0:beta8 cpe:/a:opera:opera_browser:5.0:beta3 cpe:/a:opera:opera_browser:4.02 cpe:/a:opera:opera_browser:4.01 cpe:/a:opera:opera_browser:4.00:beta2 cpe:/a:opera:opera_browser:4.00:beta5 cpe:/a:opera:opera_browser:4.00:beta3 cpe:/a:opera:opera_browser:4.00 cpe:/a:opera:opera_browser:4.00:beta4 cpe:/a:opera:opera_browser:4.00:beta6 cpe:/a:opera:opera_browser:3.62:beta cpe:/a:opera:opera_browser:3.62 cpe:/a:opera:opera_browser:3.61 cpe:/a:opera:opera_browser:3.60 cpe:/a:opera:opera_browser:3.51 cpe:/a:opera:opera_browser:3.50 cpe:/a:opera:opera_browser:3.21 cpe:/a:opera:opera_browser:3.10 cpe:/a:opera:opera_browser:3.00 cpe:/a:opera:opera_browser:3.00:beta cpe:/a:opera:opera_browser:2.12 cpe:/a:opera:opera_browser:2.10:beta3 cpe:/a:opera:opera_browser:2.10:beta1 cpe:/a:opera:opera_browser:2.10:beta2 cpe:/a:opera:opera_browser:2.10 cpe:/a:opera:opera_browser:2.00 cpe:/a:opera:opera_browser:1.00	115

Open Source Vulnerability Database (OSVDB)

id	Description
52645	Opera JPEG File Handling Unspecified Arbitrary Code Execution

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/33961
CONFIRM	http://www.opera.com/docs/changelogs/freebsd/964/ http://www.opera.com/docs/changelogs/linux/964/ http://www.opera.com/docs/changelogs/mac/964/ http://www.opera.com/docs/changelogs/solaris/964/ http://www.opera.com/docs/changelogs/windows/964/ http://www.opera.com/support/kb/view/926/ https://bugs.gentoo.org/show_bug.cgi?id=261032
GENTOO	http://security.gentoo.org/glsa/glsa-200903-30.xml
MLIST	http://www.openwall.com/lists/oss-security/2009/03/07/1
SECTRACK	http://securitytracker.com/id?1021782
SECUNIA	http://secunia.com/advisories/34135 http://secunia.com/advisories/34294 http://secunia.com/advisories/34418
SUSE	http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html
VUPEN	http://www.vupen.com/english/advisories/2009/0586

Alert History

Date	Informations
2013-05-10 23:46:21	Multiple Updates