CVE-2003-0870: opera opera_browser Out-of-bounds Write
Vulnerability summary
CVE-2003-0870 is a high (CVSS 7.5) Out-of-bounds Write vulnerability in opera opera_browser. EPSS estimates a 15.43% chance of exploitation in the next 30 days, higher than 96.7% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 21-10-2003PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
15.43%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 15.43% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (atstake.com)
Maturity: unknown
Opera 7.11/7.20 HREF - Malformed Server Name Heap Corruption
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Opera1 product
- opera_browser7.11 | 7.20
1 vendor · 1 product
References
4 links- www.securityfocus.com/bid/8853VDB EntryX Refsource BIDBroken LinkExploitPatchThird Party AdvisoryVendor Advisory
- archives.neohapsis.com/archives/vulnwatch/2003-q4/0016.htmlMailing ListX Refsource VULNWATCHBroken Link
- www.atstake.com/research/advisories/2003/a102003-1.txtVendor AdvisoryX Refsource ATSTAKEExploitPatch