Opera < 10.10 Multiple Vulnerabilities

2009-11-2400:00:00

Tenable

www.tenable.com

The version of Opera installed on the remote host is earlier than 10.01. Such versions are potentially affected by multiple vulnerabilities :

Error messages can leak onto unrelated sites, potentially leading to cross-site scripting attacks. (941)
A heap buffer overflow in string to number conversion. (942)

Binary data 5241.prm

VendorProductVersionCPE
operaopera_browsercpe:/a:opera:opera_browser

Vendor	Product	Version	CPE
opera	opera_browser		cpe:/a:opera:opera_browser

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0689

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4071

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4072

www.opera.com/docs/changelogs/windows/1010

www.opera.com/support/kb/view/941

www.opera.com/support/kb/view/942

www.securityfocus.com/archive/1/507980/30/0/threaded