QwikSec

Security Database

CVE

CWE

Training

CVE-2007-4944

Published: Sep 18, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sensitive information (memory contents) via JavaScript.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.opera.com/docs/changelogs/linux/922/

x_refsource_CONFIRM

http://www.opera.com/support/search/view/861/

x_refsource_CONFIRM

vdb-entry

x_refsource_OSVDB

vendor-advisory

x_refsource_GENTOO

http://www.opera.com/docs/changelogs/solaris/922/

x_refsource_CONFIRM

http://www.opera.com/docs/changelogs/freebsd/922/

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.