CVE-2009-2540

Opera, possibly 9.64 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.

• CWE-770

• http://www.exploit-db.com/exploits/9160Exploit, Third Party Advisory, VDB Entry
• http://www.g-sec.lu/one-bug-to-rule-them-all.htmlBroken Link, Exploit
• http://www.securityfocus.com/archive/1/504969/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/504988/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/504989/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/505006/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52874Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5957Broken Link
• http://www.exploit-db.com/exploits/9160Exploit, Third Party Advisory, VDB Entry
• http://www.g-sec.lu/one-bug-to-rule-them-all.htmlBroken Link, Exploit
• http://www.securityfocus.com/archive/1/504969/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/504988/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/504989/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/505006/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52874Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5957Broken Link

Published

Jul 20, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2534RealNetworks Helix Server and Helix Mobile Server before 13.…
• CVE-2009-2535Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMon…
• CVE-2009-2536Microsoft Internet Explorer 5 through 8 allows remote attack…
• CVE-2009-2537KDE Konqueror allows remote attackers to cause a denial of s…
• CVE-2009-2538The Nokia N95 running Symbian OS 9.2, N82, and N810 Internet…
• CVE-2009-2539The Aigo P8860 allows remote attackers to cause a denial of …
• CVE-2009-2541The web browser on the Sony PLAYSTATION 3 (PS3) allows remot…7.5
• CVE-2009-2542Netscape 6 and 8 allows remote attackers to cause a denial o…
• CVE-2009-2543Multiple unspecified vulnerabilities in the IBM Proventia en…
• CVE-2009-2544Directory traversal vulnerability in the Marcelo Costa FileS…
• CVE-2009-2545SQL injection vulnerability in Advanced Electron Forum (AEF)…
• CVE-2009-2546Directory traversal vulnerability in Advanced Electron Forum…