NVD Vulnerability Detail

CVE-2007-0127

Summary	The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled pointer to be referenced during the virtual function call.
Publication Date	Jan. 9, 2007, 11:28 a.m.
Registration Date	Jan. 29, 2021, 2:04 p.m.
Last Update	March 7, 2011, 2 p.m.

CVSS2.0 : HIGH
Score	9.3
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	はい

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:opera:opera_browser:1.00:::::::*
cpe:2.3:a:opera:opera_browser:2.00:::::::*
cpe:2.3:a:opera:opera_browser:2.10:::::::*
cpe:2.3:a:opera:opera_browser:2.10:beta1::::::
cpe:2.3:a:opera:opera_browser:2.10:beta2::::::
cpe:2.3:a:opera:opera_browser:2.10:beta3::::::
cpe:2.3:a:opera:opera_browser:2.12:::::::*
cpe:2.3:a:opera:opera_browser:3.00:::::::*
cpe:2.3:a:opera:opera_browser:3.00:beta::::::
cpe:2.3:a:opera:opera_browser:3.10:::::::*
cpe:2.3:a:opera:opera_browser:3.21:::::::*
cpe:2.3:a:opera:opera_browser:3.50:::::::*
cpe:2.3:a:opera:opera_browser:3.51:::::::*
cpe:2.3:a:opera:opera_browser:3.60:::::::*
cpe:2.3:a:opera:opera_browser:3.61:::::::*
cpe:2.3:a:opera:opera_browser:3.62:::::::*
cpe:2.3:a:opera:opera_browser:3.62:beta::::::
cpe:2.3:a:opera:opera_browser:4.00:::::::*
cpe:2.3:a:opera:opera_browser:4.00:beta2::::::
cpe:2.3:a:opera:opera_browser:4.00:beta3::::::
cpe:2.3:a:opera:opera_browser:4.00:beta4::::::
cpe:2.3:a:opera:opera_browser:4.00:beta5::::::
cpe:2.3:a:opera:opera_browser:4.00:beta6::::::
cpe:2.3:a:opera:opera_browser:4.01:::::::*
cpe:2.3:a:opera:opera_browser:4.02:::::::*
cpe:2.3:a:opera:opera_browser:5.0:::::::*
cpe:2.3:a:opera:opera_browser:5.0:beta2::::::
cpe:2.3:a:opera:opera_browser:5.0:beta3::::::
cpe:2.3:a:opera:opera_browser:5.0:beta4::::::
cpe:2.3:a:opera:opera_browser:5.0:beta5::::::
cpe:2.3:a:opera:opera_browser:5.0:beta6::::::
cpe:2.3:a:opera:opera_browser:5.0:beta7::::::
cpe:2.3:a:opera:opera_browser:5.0:beta8::::::
cpe:2.3:a:opera:opera_browser:5.02:::::::*
cpe:2.3:a:opera:opera_browser:5.10:::::::*
cpe:2.3:a:opera:opera_browser:5.11:::::::*
cpe:2.3:a:opera:opera_browser:5.12:::::::*
cpe:2.3:a:opera:opera_browser:6.0:::::::*
cpe:2.3:a:opera:opera_browser:6.0:beta1::::::
cpe:2.3:a:opera:opera_browser:6.0:beta2::::::
cpe:2.3:a:opera:opera_browser:6.0:tp1::::::
cpe:2.3:a:opera:opera_browser:6.0:tp2::::::
cpe:2.3:a:opera:opera_browser:6.0:tp3::::::
cpe:2.3:a:opera:opera_browser:6.01:::::::*
cpe:2.3:a:opera:opera_browser:6.1:::::::*
cpe:2.3:a:opera:opera_browser:6.1:beta1::::::
cpe:2.3:a:opera:opera_browser:6.02:::::::*
cpe:2.3:a:opera:opera_browser:6.03:::::::*
cpe:2.3:a:opera:opera_browser:6.04:::::::*
cpe:2.3:a:opera:opera_browser:6.05:::::::*
cpe:2.3:a:opera:opera_browser:6.06:::::::*
cpe:2.3:a:opera:opera_browser:6.11:::::::*
cpe:2.3:a:opera:opera_browser:6.12:::::::*
cpe:2.3:a:opera:opera_browser:7.0:::::::*
cpe:2.3:a:opera:opera_browser:7.0:beta1::::::
cpe:2.3:a:opera:opera_browser:7.0:beta1_v2::::::
cpe:2.3:a:opera:opera_browser:7.0:beta2::::::
cpe:2.3:a:opera:opera_browser:7.01:::::::*
cpe:2.3:a:opera:opera_browser:7.02:::::::*
cpe:2.3:a:opera:opera_browser:7.03:::::::*
cpe:2.3:a:opera:opera_browser:7.10:::::::*
cpe:2.3:a:opera:opera_browser:7.10:beta1::::::
cpe:2.3:a:opera:opera_browser:7.11:::::::*
cpe:2.3:a:opera:opera_browser:7.11:beta2::::::
cpe:2.3:a:opera:opera_browser:7.20:::::::*
cpe:2.3:a:opera:opera_browser:7.20:beta7::::::
cpe:2.3:a:opera:opera_browser:7.21:::::::*
cpe:2.3:a:opera:opera_browser:7.22:::::::*
cpe:2.3:a:opera:opera_browser:7.23:::::::*
cpe:2.3:a:opera:opera_browser:7.50:::::::*
cpe:2.3:a:opera:opera_browser:7.50:beta1::::::
cpe:2.3:a:opera:opera_browser:7.51:::::::*
cpe:2.3:a:opera:opera_browser:7.52:::::::*
cpe:2.3:a:opera:opera_browser:7.53:::::::*
cpe:2.3:a:opera:opera_browser:7.54:::::::*
cpe:2.3:a:opera:opera_browser:7.54:update1::::::
cpe:2.3:a:opera:opera_browser:7.54:update2::::::
cpe:2.3:a:opera:opera_browser:7.60:::::::*
cpe:2.3:a:opera:opera_browser:8.0:::::::*
cpe:2.3:a:opera:opera_browser:8.0:beta1::::::
cpe:2.3:a:opera:opera_browser:8.0:beta2::::::
cpe:2.3:a:opera:opera_browser:8.0:beta3::::::
cpe:2.3:a:opera:opera_browser:8.01:::::::*
cpe:2.3:a:opera:opera_browser:8.02:::::::*
cpe:2.3:a:opera:opera_browser:8.50:::::::*
cpe:2.3:a:opera:opera_browser:8.51:::::::*
cpe:2.3:a:opera:opera_browser:8.52:::::::*
cpe:2.3:a:opera:opera_browser:8.53:::::::*
cpe:2.3:a:opera:opera_browser:8.54:::::::*
cpe:2.3:a:opera:opera_browser:9.0:::::::*
cpe:2.3:a:opera:opera_browser:9.0:beta1::::::
cpe:2.3:a:opera:opera_browser:9.0:beta2::::::
cpe:2.3:a:opera:opera_browser:9.01:::::::*
cpe:2.3:a:opera:opera_browser::::::::		9.02

Related information, measures and tools

No	URL	refsource	タグ
1	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=458	IDEFENSE	Patch Vendor Advisory
2	http://lists.suse.com/archive/suse-security-announce/2007-Jan/0009.html	SUSE
3	http://osvdb.org/31575	OSVDB
4	http://secunia.com/advisories/23613	SECUNIA	Patch Vendor Advisory
5	http://secunia.com/advisories/23739	SECUNIA	Vendor Advisory
6	http://secunia.com/advisories/23771	SECUNIA	Vendor Advisory
7	http://securitytracker.com/id?1017473	SECTRACK
8	http://www.gentoo.org/security/en/glsa/glsa-200701-08.xml	GENTOO
9	http://www.opera.com/support/search/supsearch.dml?index=851	CONFIRM
10	http://www.vupen.com/english/advisories/2007/0060	VUPEN

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-94	コード・インジェクション	https://cwe.mitre.org/data/definitions/94.html

JVN Vulnerability Information

Opera の Javascript SVG サポートにおける任意のコードを実行される脆弱性

Title	Opera の Javascript SVG サポートにおける任意のコードを実行される脆弱性
Summary	Opera の Javascript SVG サポートは、createSVGTransformFromMatrix リクエストのオブジェクトタイプを適切に検証しないため、任意のコードを実行される脆弱性が存在します。
Possible impacts	第三者により、createSVGTransformFromMatrix リクエスト内の無効なオブジェクトを使用する JavaScript コードを介して、仮想関数呼び出し中に制御されたポインタを参照され、任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 8, 2007, midnight
Registration Date	Sept. 25, 2012, 3:36 p.m.
Last Update	Sept. 25, 2012, 3:36 p.m.

Affected System

Opera Software ASA

Opera 9.10 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2007-0127	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0127
National Vulnerability Database (NVD)
2	CVE-2007-0127	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-0127

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-94	https://jvndb.jvn.jp/ja/cwe/CWE-94.html

ベンダー情報

No	Name	URL
Opera
1	Vulnerability in createSVGTransformFromMatrix (JavaScript, SVG)	http://www.opera.com/support/search/supsearch.dml?index=851

Change Log

No	Changed Details	Date of change
0	[2012年09月25日] 掲載	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:opera:opera_browser:1.00:::::::*
cpe:2.3:a:opera:opera_browser:2.00:::::::*
cpe:2.3:a:opera:opera_browser:2.10:::::::*
cpe:2.3:a:opera:opera_browser:2.10:beta1::::::
cpe:2.3:a:opera:opera_browser:2.10:beta2::::::
cpe:2.3:a:opera:opera_browser:2.10:beta3::::::
cpe:2.3:a:opera:opera_browser:2.12:::::::*
cpe:2.3:a:opera:opera_browser:3.00:::::::*
cpe:2.3:a:opera:opera_browser:3.00:beta::::::
cpe:2.3:a:opera:opera_browser:3.10:::::::*
cpe:2.3:a:opera:opera_browser:3.21:::::::*
cpe:2.3:a:opera:opera_browser:3.50:::::::*
cpe:2.3:a:opera:opera_browser:3.51:::::::*
cpe:2.3:a:opera:opera_browser:3.60:::::::*
cpe:2.3:a:opera:opera_browser:3.61:::::::*
cpe:2.3:a:opera:opera_browser:3.62:::::::*
cpe:2.3:a:opera:opera_browser:3.62:beta::::::
cpe:2.3:a:opera:opera_browser:4.00:::::::*
cpe:2.3:a:opera:opera_browser:4.00:beta2::::::
cpe:2.3:a:opera:opera_browser:4.00:beta3::::::
cpe:2.3:a:opera:opera_browser:4.00:beta4::::::
cpe:2.3:a:opera:opera_browser:4.00:beta5::::::
cpe:2.3:a:opera:opera_browser:4.00:beta6::::::
cpe:2.3:a:opera:opera_browser:4.01:::::::*
cpe:2.3:a:opera:opera_browser:4.02:::::::*
cpe:2.3:a:opera:opera_browser:5.0:::::::*
cpe:2.3:a:opera:opera_browser:5.0:beta2::::::
cpe:2.3:a:opera:opera_browser:5.0:beta3::::::
cpe:2.3:a:opera:opera_browser:5.0:beta4::::::
cpe:2.3:a:opera:opera_browser:5.0:beta5::::::
cpe:2.3:a:opera:opera_browser:5.0:beta6::::::
cpe:2.3:a:opera:opera_browser:5.0:beta7::::::
cpe:2.3:a:opera:opera_browser:5.0:beta8::::::
cpe:2.3:a:opera:opera_browser:5.02:::::::*
cpe:2.3:a:opera:opera_browser:5.10:::::::*
cpe:2.3:a:opera:opera_browser:5.11:::::::*
cpe:2.3:a:opera:opera_browser:5.12:::::::*
cpe:2.3:a:opera:opera_browser:6.0:::::::*
cpe:2.3:a:opera:opera_browser:6.0:beta1::::::
cpe:2.3:a:opera:opera_browser:6.0:beta2::::::
cpe:2.3:a:opera:opera_browser:6.0:tp1::::::
cpe:2.3:a:opera:opera_browser:6.0:tp2::::::
cpe:2.3:a:opera:opera_browser:6.0:tp3::::::
cpe:2.3:a:opera:opera_browser:6.01:::::::*
cpe:2.3:a:opera:opera_browser:6.1:::::::*
cpe:2.3:a:opera:opera_browser:6.1:beta1::::::
cpe:2.3:a:opera:opera_browser:6.02:::::::*
cpe:2.3:a:opera:opera_browser:6.03:::::::*
cpe:2.3:a:opera:opera_browser:6.04:::::::*
cpe:2.3:a:opera:opera_browser:6.05:::::::*
cpe:2.3:a:opera:opera_browser:6.06:::::::*
cpe:2.3:a:opera:opera_browser:6.11:::::::*
cpe:2.3:a:opera:opera_browser:6.12:::::::*
cpe:2.3:a:opera:opera_browser:7.0:::::::*
cpe:2.3:a:opera:opera_browser:7.0:beta1::::::
cpe:2.3:a:opera:opera_browser:7.0:beta1_v2::::::
cpe:2.3:a:opera:opera_browser:7.0:beta2::::::
cpe:2.3:a:opera:opera_browser:7.01:::::::*
cpe:2.3:a:opera:opera_browser:7.02:::::::*
cpe:2.3:a:opera:opera_browser:7.03:::::::*
cpe:2.3:a:opera:opera_browser:7.10:::::::*
cpe:2.3:a:opera:opera_browser:7.10:beta1::::::
cpe:2.3:a:opera:opera_browser:7.11:::::::*
cpe:2.3:a:opera:opera_browser:7.11:beta2::::::
cpe:2.3:a:opera:opera_browser:7.20:::::::*
cpe:2.3:a:opera:opera_browser:7.20:beta7::::::
cpe:2.3:a:opera:opera_browser:7.21:::::::*
cpe:2.3:a:opera:opera_browser:7.22:::::::*
cpe:2.3:a:opera:opera_browser:7.23:::::::*
cpe:2.3:a:opera:opera_browser:7.50:::::::*
cpe:2.3:a:opera:opera_browser:7.50:beta1::::::
cpe:2.3:a:opera:opera_browser:7.51:::::::*
cpe:2.3:a:opera:opera_browser:7.52:::::::*
cpe:2.3:a:opera:opera_browser:7.53:::::::*
cpe:2.3:a:opera:opera_browser:7.54:::::::*
cpe:2.3:a:opera:opera_browser:7.54:update1::::::
cpe:2.3:a:opera:opera_browser:7.54:update2::::::
cpe:2.3:a:opera:opera_browser:7.60:::::::*
cpe:2.3:a:opera:opera_browser:8.0:::::::*
cpe:2.3:a:opera:opera_browser:8.0:beta1::::::
cpe:2.3:a:opera:opera_browser:8.0:beta2::::::
cpe:2.3:a:opera:opera_browser:8.0:beta3::::::
cpe:2.3:a:opera:opera_browser:8.01:::::::*
cpe:2.3:a:opera:opera_browser:8.02:::::::*
cpe:2.3:a:opera:opera_browser:8.50:::::::*
cpe:2.3:a:opera:opera_browser:8.51:::::::*
cpe:2.3:a:opera:opera_browser:8.52:::::::*
cpe:2.3:a:opera:opera_browser:8.53:::::::*
cpe:2.3:a:opera:opera_browser:8.54:::::::*
cpe:2.3:a:opera:opera_browser:9.0:::::::*
cpe:2.3:a:opera:opera_browser:9.0:beta1::::::
cpe:2.3:a:opera:opera_browser:9.0:beta2::::::
cpe:2.3:a:opera:opera_browser:9.01:::::::*
cpe:2.3:a:opera:opera_browser::::::::		9.02