Opera < 11.61 Multiple Vulnerabilities

#
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(57751);
  script_version("1.8");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/05/27");

  script_bugtraq_id(51648);

  script_name(english:"Opera < 11.61 Multiple Vulnerabilities");
  script_summary(english:"Checks version number of Opera");

  script_set_attribute(attribute:"synopsis", value:
"The remote host contains a web browser that is potentially affected
by multiple vulnerabilities.");
  script_set_attribute(attribute:"description", value:
"The version of Opera installed on the remote Windows host is earlier
than 11.61 and is, therefore, potentially affected by multiple
vulnerabilities :

  - Same-origin policy restriction can be bypassed via
    specially crafted web content and HTML frames
    manipulation. (Issue #1007)

  - An error in local file access restrictions can allow
    malicious websites to determine the presence of local
    files. Note that the content of local files are not 
    disclosed and an attacker would need to guess the path
    of a file in order to determine if the file is present.
    (Issue #1008)");
  script_set_attribute(attribute:"see_also", value:"http://www.opera.com/support/kb/view/1007/");
  script_set_attribute(attribute:"see_also", value:"http://www.opera.com/support/kb/view/1008/");
  # http://web.archive.org/web/20170713152106/http://www.opera.com:80/docs/changelogs/windows/1161/
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?85be164c");
  script_set_attribute(attribute:"solution", value:"Upgrade to Opera 11.61 or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(20, 74, 79, 442, 629, 711, 712, 722, 725, 750, 751, 800, 801, 809, 811, 864, 900, 928, 931, 990);

  script_set_attribute(attribute:"vuln_publication_date", value:"2012/01/24");
  script_set_attribute(attribute:"patch_publication_date", value:"2012/01/24");
  script_set_attribute(attribute:"plugin_publication_date", value:"2012/01/31");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:opera:opera_browser");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2012-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("opera_installed.nasl");
  script_require_keys("installed_sw/Opera");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'requires': [
    {'scope': 'target', 'match': {'os': 'windows'}}
  ],
  'checks': [
    {
      'product': {'name': 'Opera', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {'fixed_version': '11.61.1250.0'}
      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING, flags:{"xss":TRUE});
vdf::handle_check_and_report_errors(vdf_result:vdf_result);