CVE-2010-1728

Opera before 10.53 on Windows and Mac OS X does not properly handle a series of document modifications that occur asynchronously, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an infinite loop, leading to attempted use of uninitialized memory. NOTE: this might overlap CVE-2006-6955.

• CWE-399

• http://h.ackack.net/?p=258Exploit
• http://my.opera.com/desktopteam/blog/2010/04/28/opera-10-53-rc1-for-windows-and-mac
• http://secunia.com/advisories/39590Vendor Advisory
• http://www.opera.com/docs/changelogs/mac/1053/
• http://www.opera.com/docs/changelogs/windows/1053/
• http://www.opera.com/support/kb/view/953/Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0999Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58231
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11927
• http://h.ackack.net/?p=258Exploit
• http://my.opera.com/desktopteam/blog/2010/04/28/opera-10-53-rc1-for-windows-and-mac
• http://secunia.com/advisories/39590Vendor Advisory
• http://www.opera.com/docs/changelogs/mac/1053/
• http://www.opera.com/docs/changelogs/windows/1053/
• http://www.opera.com/support/kb/view/953/Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0999Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58231
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11927

Published

May 6, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1722Directory traversal vulnerability in the Online Market (com_…
• CVE-2010-1723Directory traversal vulnerability in the iNetLanka Contact U…
• CVE-2010-1724Multiple cross-site scripting (XSS) vulnerabilities in Zikul…
• CVE-2010-1725SQL injection vulnerability in offers_buy.php in Alibaba Clo…
• CVE-2010-1726SQL injection vulnerability in offers_buy.php in EC21 Clone …
• CVE-2010-1727SQL injection vulnerability in type.asp in JobPost 1.0 allow…
• CVE-2010-1729WebKit.dll in WebKit, as used in Safari.exe 4.531.9.1 in App…
• CVE-2010-1730Dolphin Browser 2.5.0 on the HTC Hero allows remote attacker…
• CVE-2010-1731Google Chrome on the HTC Hero allows remote attackers to cau…
• CVE-2010-1732Cross-site request forgery (CSRF) vulnerability in the users…
• CVE-2010-1733Multiple SQL injection vulnerabilities in OCS Inventory NG b…
• CVE-2010-1734The SfnINSTRING function in win32k.sys in the kernel in Micr…