critical9.3Public exploit code
CVE-2013-1638
Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Opera SVG - Use-After-Free2013-02-05 · dos · windows · Verified
Impact
Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opera | Opera Browser | through 12.12 Versions 12.00, 12.01, 12.02, 12.10, 12.11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00038.html
- http://www.opera.com/docs/changelogs/unified/1213/
- http://www.opera.com/support/kb/view/1043/
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00038.html
- http://www.opera.com/docs/changelogs/unified/1213/
- http://www.opera.com/support/kb/view/1043/