Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2006-3199

31
FAUCET Score

CVE-2006-3199 describes a denial-of-service vulnerability in Opera 9, where a remote attacker can crash the browser by providing an A tag with an excessively long hostname in its href attribute. This triggers an out-of-bounds operation, leading to a system crash. The vulnerability has a CVSS score of 5.0, indicating a medium severity, and can be exploited remotely with low attack complexity, resulting in a partial impact on availability. While there is no evidence of active exploitation or Metasploit modules, a proof-of-concept exploit is available on ExploitDB, and the vulnerability has received minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
9.0CPE matchmatch criteria
cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
14.60%
Probability of exploitation in next 30 days
EPSS Percentile
96.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
ExploitDB: EDB-1937 · Jun 21, 2006
This CVE's current EPSS score of 0.1460 is in the 96th percentile among its peer group of 23,725 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

my.opera.com / community/forums/topic.dml
Broken Link
securitytracker.com / id
Broken LinkThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com / vulnerabilities/27289
Third Party AdvisoryVDB Entry
critical.lt
ExploitThird Party Advisory
osvdb.org / 27510
Broken Link
securityfocus.com / archive/1/437945/100/0/threaded
Broken LinkThird Party AdvisoryVDB Entry
securityfocus.com / archive/1/438326/100/0/threaded
Broken LinkThird Party AdvisoryVDB Entry
securityfocus.com / bid/18585
Broken LinkExploitThird Party AdvisoryVDB Entry
vupen.com / english/advisories/2006/2617
Broken Link