CVE-2006-3945

The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background property of a DHTML element to a long http or https URL, which triggers memory corruption.

• CWE-787

• http://browserfun.blogspot.com/2006/07/mobb-26-opera-css-background.htmlBroken Link, Exploit
• http://www.osvdb.org/27374Broken Link, Exploit
• http://www.vupen.com/english/advisories/2006/2987Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27977Third Party Advisory, VDB Entry
• http://browserfun.blogspot.com/2006/07/mobb-26-opera-css-background.htmlBroken Link, Exploit
• http://www.osvdb.org/27374Broken Link, Exploit
• http://www.vupen.com/english/advisories/2006/2987Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27977Third Party Advisory, VDB Entry

Published

Jul 31, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3939ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to …
• CVE-2006-3940Multiple SQL injection vulnerabilities in phpbb-Auction allo…
• CVE-2006-3941Unspecified vulnerability in the daemons for Sun N1 Grid Eng…
• CVE-2006-3942The server driver (srv.sys) in Microsoft Windows NT 4.0, 200…
• CVE-2006-3943Stack-based buffer overflow in NDFXArtEffects in Microsoft I…
• CVE-2006-3944Microsoft Internet Explorer 6 on Windows XP SP2 allows remot…
• CVE-2006-3946WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 all…
• CVE-2006-3947PHP remote file inclusion vulnerability in components/com_ma…
• CVE-2006-3948Cross-site scripting (XSS) vulnerability in modules.php in P…
• CVE-2006-3949PHP remote file inclusion vulnerability in artlinks.dispnew.…
• CVE-2006-3950SQL injection vulnerability in x-statistics.php in X-Scripts…
• CVE-2006-3951PHP remote file inclusion vulnerability in moodle.php in Mam…