Opera < 9.50 Multiple Vulnerabilities

The version of Opera installed on the remote host reportedly is affected by several issues : - Improper handling of special characters in page addresses can make addresses look like other ones, aiding in phishing attacks. - Specially crafted HTML canvas elements could violate the same-origin imag...

Images can be read cross-domain with canvas

HTML CANVAS elements can use images as patterns, and that image data is made available to scripts. When the images are retrieved from other Web sites, the image data should no longer be available to scripts. A flaw exists in the way that Opera checks for the source of these images. Suitable...

Opera: Multiple vulnerabilities

Background Opera is a fast web browser that is available free of charge. Description Michal Zalewski reported two vulnerabilities, memory corruption when adding news feed sources from a website CVE-2008-1761 as well as when processing HTML CANVAS elements to use scaled images CVE-2008-1762...

Memory corruption

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...

CVE-2008-1762

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...

CVE-2008-1762

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...

CVE-2008-1762: Undefined Security Weakness

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...

Opera Web浏览器9.27版本修复多个内存破坏漏洞

BUGTRAQ ID: 28585 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的实现上存在多个安全漏洞，远程攻击者可能利用这些漏洞控制用户系统。 当Opera遇到网页上的newsfeed源时，就会提示用户添加该源为newsfeed。恶意脚本可以控制feed源，导致Opera由于错误的内存访问而出现崩溃或执行任意指令。 HTML CANVAS单元可使用度量图形作为图样。如果精心控制了图形的度量的话，脚本就会导致Opera由于内存破坏而出现崩溃或执行任意代码。 Opera Software Opera = 9.26 Opera Software -------------...

CVE-2007-6524

Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap BMP file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420...