CVE-2007-0127

Published Jan 9, 2007 CVSS 2.0 · 9.3 Critical EPSS 4.8% KEV · Not listed
Description
The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled pointer to be referenced during the virtual function call.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 12:03 PM
Reserved
Jan 8, 2007, 12:00 AM
Status
Modified
Published
Jan 9, 2007, 2:28 AM
Modified
Jun 16, 2026, 10:34 PM