CVE-2011-2628

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to page unload.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jul 1, 2011
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-26295.0Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash) via unknown contentCVE-2011-26304.3Opera before 11.11 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page that is notCVE-2011-26315.0The Cascading Style Sheets (CSS) implementation in Opera before 11.11 does not properly handle the column-count property, which allows remotCVE-2011-26325.0Opera before 11.11 does not properly handle destruction of a Silverlight instance, which allows remote attackers to cause a denial of servicCVE-2011-26335.0Unspecified vulnerability in Opera before 11.11 allows remote attackers to cause a denial of service (application crash) via vectors involviCVE-2011-26345.0Opera before 11.10 allows remote attackers to hijack (1) searches and (2) customizations via unspecified third party applications.CVE-2011-26355.0The Cascading Style Sheets (CSS) implementation in Opera before 11.10 allows remote attackers to cause a denial of service (application crasCVE-2011-26365.0Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via unknown contentCVE-2011-26375.0Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via unknown contentCVE-2011-26385.0Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via unknown contentCVE-2011-26395.0Opera before 11.10 does not properly handle hidden animated GIF images, which allows remote attackers to cause a denial of service (CPU consCVE-2011-26405.0Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via an HTML document that has an empty parameter
CVE-2011-2628: Critical severity, CVSS 10.0 | Vulnix