Opera: Multiple vulnerabilities

Background Opera is a multi-platform web browser. Description An error known as "a virtual function call on an invalid pointer" has been discovered in the JavaScript engine CVE-2007-4367. Furthermore, iDefense Labs reported that an already-freed pointer may be still used under unspecified...

FreeBSD : opera -- multiple vulnerabilities (12d266b6-363f-11dc-b6c9-000c6ec775d9)

Opera Software ASA reports of multiple security fixes in Opera, including an arbitrary code execute vulnerability : Opera for Linux, FreeBSD, and Solaris has a flaw in the createPattern function that leaves old data that was in the memory before Opera allocated it in the new pattern. The pattern...

Opera < 9.22 Multiple Vulnerabilities

The version of Opera installed on the remote host reportedly can be tricked into attempting to dereference an invalid object pointer when parsing a specially crafted BitTorrent header. This could cause the application to crash or even lead to execution of arbitrary code subject to the privileges ...

Design/Logic Flaw

Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object...

CVE-2007-3929

Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object...

CVE-2007-3929

Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object...

CVE-2007-3929

CVE-2007-3929 describes a use-after-free vulnerability in the BitTorrent support of Opera prior to 9.22. A crafted BitTorrent header can leave a dangling pointer to an invalid object, potentially enabling user-assisted remote code execution. Connected advisories indicate multiple vulnerabilities ...

CVE-2007-3929

Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object...

Opera浏览器BitTorrent头解析无效指针引用漏洞

BUGTRAQ ID: 24970 Opera是一款流行的WEB浏览器，支持多种平台。 Opera在处理畸形的BitTorrent文件头结构时存在内存破坏漏洞，远程攻击者可能利用此漏洞控制用户系统。 Opera支持BitTorrent下载。在解析特制的BitTorrent头时，Opera可能会使用已经释放了的内存，这会导致引用无效的对象指针。如果用户受骗点击了恶意的BitTorrent下载然后右击传输删除的话，就可能触发这个漏洞，导致执行任意指令。 Opera Software Opera 9.21 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Opera use-after-free vulnerability

Memory is used after free on BitTorrent headers parsing...

A malicious torrent can cause Opera to execute arbitrary code

Removing a specially crafted torrent from the download managercan crash Opera. The crash is caused by an erroneous memoryaccess.An attacker needs to entice the user to accept the maliciousBitTorrent download, and later remove it from Opera's downloadmanager. To inject code, additional means will...

iDefense Security Advisory 07.19.07: Opera Software Opera Web Browser BitTorrent Dangling Pointer Vulnerability

Opera Software Opera Web Browser BitTorrent Dangling Pointer Vulnerability iDefense Security Advisory 07.19.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 19, 2007 I. BACKGROUND Opera is a cross-platform web browser. More information is available at http://www.opera.com/ II...

Opera BitTorrent buffer overflow

Buffer overflow on BitTorrent headers parsing...

BitTorrent Server Detection

Binary data 3991.prm...

Ktorrent: Multiple vulnerabilities

Background Ktorrent is a Bittorrent client for KDE. Description Bryan Burns of Juniper Networks discovered a vulnerability in chunkcounter.cpp when processing large or negative idx values, and a directory traversal vulnerability in torrent.cpp. Impact A remote attacker could entice a user to...

CVE-2007-2274

The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service CPU consumption and application crash via a malformed torrent file. NOTE: the original disclosure refers to this as a memory leak, but it is not certain...

Design/Logic Flaw

The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service CPU consumption and application crash via a malformed torrent file. NOTE: the original disclosure refers to this as a memory leak, but it is not certain...

CVE-2007-2274

The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service CPU consumption and application crash via a malformed torrent file. NOTE: the original disclosure refers to this as a memory leak, but it is not certain...

CVE-2007-2274

The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service CPU consumption and application crash via a malformed torrent file. NOTE: the original disclosure refers to this as a memory leak, but it is not certain...

CVE-2007-2274

CVE-2007-2274 describes a DoS in Opera’s BitTorrent implementation (Opera 9.2) triggered by a malformed torrent file, with original disclosures mentioning a memory leak but uncertainty remains. Connected sources also reference related Opera issues: CVE-2007-2809 describes a buffer overflow in Ope...