First published: Wed Jul 22 2009(Updated: )
Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption, and application hang) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Opera | =7.23 | |
Opera | =9.02 | |
Opera | =7.53 | |
Opera | =8.50 | |
Opera | =9.51 | |
Opera | =8.53 | |
Opera | =9.12 | |
Opera | =8.0 | |
Opera | <=9.52 | |
Opera | =8.54 | |
Opera | =8.02 | |
Opera | =9.20 | |
Opera | =9.21 | |
Opera | =8.51 | |
Opera | =7.60 | |
Opera | =7.54 | |
Opera | =9.22 | |
Opera | =9.01 | |
Opera | =9.0 | |
Opera | =9.10 | |
Opera | =8.52 | |
Opera | =8.01 | |
Opera | =7.0 | |
Web Browser for Android | <=9.52 | |
Web Browser for Android | =7.0 | |
Web Browser for Android | =7.23 | |
Web Browser for Android | =7.53 | |
Web Browser for Android | =7.54 | |
Web Browser for Android | =7.60 | |
Web Browser for Android | =8.0 | |
Web Browser for Android | =8.01 | |
Web Browser for Android | =8.02 | |
Web Browser for Android | =8.50 | |
Web Browser for Android | =8.51 | |
Web Browser for Android | =8.52 | |
Web Browser for Android | =8.53 | |
Web Browser for Android | =8.54 | |
Web Browser for Android | =9.0 | |
Web Browser for Android | =9.01 | |
Web Browser for Android | =9.02 | |
Web Browser for Android | =9.10 | |
Web Browser for Android | =9.12 | |
Web Browser for Android | =9.20 | |
Web Browser for Android | =9.21 | |
Web Browser for Android | =9.22 | |
Web Browser for Android | =9.51 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-2577 is considered a denial of service vulnerability due to high CPU and memory consumption.
To mitigate CVE-2009-2577, upgrade to a version of the Opera browser later than 9.52.
CVE-2009-2577 affects Opera versions 9.52 and earlier.
CVE-2009-2577 is a denial of service vulnerability.
Yes, CVE-2009-2577 can be exploited remotely through a long Unicode string passed to the write method.