SuSE Update for opera openSUSE-SU-2012:0992-1 (opera)

###############################################################################
# OpenVAS Vulnerability Test
# $Id: gb_suse_2012_0992_1.nasl 8265 2018-01-01 06:29:23Z teissa $
#
# SuSE Update for opera openSUSE-SU-2012:0992-1 (opera)
#
# Authors:
# System Generated Check
#
# Copyright:
# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################

include("revisions-lib.inc");
tag_insight = "Opera was updated to version 12.1, fixing various bugs and
  security issues.

  http://www.opera.com/docs/changelogs/unix/1201/

  Fixes and Stability Enhancements since Opera 12.00 General
  and User Interface

  Several general fixes and stability improvements
  Website thumbnail memory usage improvements Address bar
  inline auto-completion no longer prefers shortest domain
  Corrected an error that could occur after removing the
  plugin wrapper Resolved an issue where favicons were
  squeezed too much when many tabs were open

  Display and Scripting

  Resolved an error with XHR transfers where content-type
  was incorrectly determined Improved handling of object
  literals with numeric duplicate properties Changed behavior
  of nested/chained comma expressions: now expressing and
  compiling them as a list rather than a tree Aligned
  behavior of the #caller property on function code objects
  in ECMAScript 5 strict mode with the specification Fixed an
  issue where input type=month would return an incorrect
  value in its valueAsDate property Resolved an issue with
  JSON.stringify() that could occur on cached number
  conversion Fixed a problem with redefining special
  properties using Object.defineProperty()

  Network and Site-Specific

  Fixed an issue where loading would stop at "Document
  100%" but the page would still be loading tuenti.com:
  Corrected behavior when long content was displayed
  Fixed an issue with secure transaction errors Fixed an issue
  with Google Maps Labs that occurred when compiling top-level loops inside strict evals
  Corrected a problem that could occur with DISQUS Fixed a
  crash occurring on Lenovo's "Shop now" page Corrected
  issues when calling window.console.log via a variable at
  watch4you Resolved an issue with Yahoo! chat

  Mail, News, Chat

  Resolved an issue where under certain conditions the
  mail panel would continuously scroll up Fixed a crash
  occurring when loading mail databases on startup

  Security

  Re-fixed an issue where certain URL constructs could
  allow arbitrary code execution, as reported by Andrey
  Stroganov; see our advisory Fixed an issue where certain
  characters in HTML could incorrectly be ignored, which
  could facilitate XSS attacks; see our advisory Fixed
  another issue where small windows could be used to trick
  users into executing downloads as reported by Jordi
  Chancel; see our advisory F ... 

  Description truncated, for more information please check the Reference URL";

tag_affected = "opera on openSUSE 12.1, openSUSE 11.4";
tag_solution = "Please Install the Updated Packages.";



if(description)
{
  script_id(850311);
  script_version("$Revision: 8265 $");
  script_tag(name:"last_modification", value:"$Date: 2018-01-01 07:29:23 +0100 (Mon, 01 Jan 2018) $");
  script_tag(name:"creation_date", value:"2012-12-13 17:01:16 +0530 (Thu, 13 Dec 2012)");
  script_tag(name:"cvss_base", value:"7.5");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_xref(name: "openSUSE-SU", value: "2012:0992_1");
  script_name("SuSE Update for opera openSUSE-SU-2012:0992-1 (opera)");

  script_tag(name: "summary" , value: "Check for the Version of opera");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (c) 2012 Greenbone Networks GmbH");
  script_family("SuSE Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/suse", "ssh/login/rpms");
  script_tag(name : "affected" , value : tag_affected);
  script_tag(name : "solution" , value : tag_solution);
  script_tag(name : "insight" , value : tag_insight);
  script_tag(name:"qod_type", value:"package");
  script_tag(name:"solution_type", value:"VendorFix");
  exit(0);
}


include("pkg-lib-rpm.inc");

release = get_kb_item("ssh/login/release");

res = "";
if(release == NULL){
  exit(0);
}

if(release == "openSUSE11.4")
{

  if ((res = isrpmvuln(pkg:"opera", rpm:"opera~12.01~25.1", rls:"openSUSE11.4")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"opera-gtk", rpm:"opera-gtk~12.01~25.1", rls:"openSUSE11.4")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"opera-kde4", rpm:"opera-kde4~12.01~25.1", rls:"openSUSE11.4")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99); # Not vulnerable.
  exit(0);
}


if(release == "openSUSE12.1")
{

  if ((res = isrpmvuln(pkg:"opera", rpm:"opera~12.01~19.1", rls:"openSUSE12.1")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"opera-gtk", rpm:"opera-gtk~12.01~19.1", rls:"openSUSE12.1")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = isrpmvuln(pkg:"opera-kde4", rpm:"opera-kde4~12.01~19.1", rls:"openSUSE12.1")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99); # Not vulnerable.
  exit(0);
}