Echo Security Advisory 2006.35

ECHOADV35$2006 ------------------------------------------------------------------------------------ ECHOADV35$2006 OPERA Web Browser 9 Denial OF Service ------------------------------------------------------------------------------------ Author : Ahmad Muammar W.K a.k.a y3dips Date Found : July,...

Opera Web Browser 9.00 (iframe) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ================================================================ Opera Web Browser 9.00 iframe Remote Denial of Service Exploit ================================================================ function mystyle if fake.document.styleSheets.length...

Opera Web Browser 9.00 (iframe) Remote Denial of Service Exploit

No description provided by source. !-- Opera 9 DOS exploit, discovered by Ahmad Muammar W.K y3dipsatechodotordotid http://y3d1ps.blogspot.com //-- html iframe src="palsu.php" name="fake" /iframe script type="text/javascript" function mystyle if fake.document.styleSheets.length == 1 f =...

Opera Web Browser 9.00 - iframe Remote Denial of Service

Opera Web Browser 9.00 - iframe Remote Denial of Service function mystyle if fake.document.styleSheets.length == 1 f = document.forms"basicstyle".elements; for j = 0; j milw0rm.com 2006-07-01...

Opera Web Browser 9.00 - 'iframe' Remote Denial of Service

function mystyle if fake.document.styleSheets.length == 1 f = document.forms"basicstyle".elements; for j = 0; j milw0rm.com 2006-07-01...

CVE-2006-3331

Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks...

CVE-2006-3331

Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks...

CVE-2006-3331

Opera before 9.0 contains a vulnerability where the SSL security bar is not reset after a download dialog from an SSL-enabled site, allowing remote attackers to spoof a trusted SSL certificate from an untrusted site and enabling phishing attacks. The available connected documents confirm the affe...

CVE-2006-3331: Undefined Security Weakness

Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks...

Opera < 9.00 Multiple Vulnerabilities

The version of Opera installed on the remote host reportedly contains an issue that presents itself when the height and width parameters of a JPEG image are set excessively high, causing Opera to allocate insufficient memory for the image and crash as it tries to write to memory at the wrong...

[SA19480] Opera SSL Certificate &quot;Stealing&quot; Weakness

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

Opera SSL certificate spofing

After file download dialog for SSL enabled site page is incorrectly shown as SSL protected with SSL certificate of downloaded file...

CVE-2006-3227

Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to modify the visual presentation of web pages and possibly bypass protection mechanisms such as content filters via ASCII characters with the 8th bit set, whi...

CVE-2006-3227

CVE-2006-3227 describes an interpretation conflict between Internet Explorer and other browsers (e.g., Mozilla/Firefox/Opera) that may let remote attackers alter the visual presentation of web pages and potentially bypass protection mechanisms by using ASCII characters with the 8th bit set. IE ma...

CVE-2006-3199

Opera 9 allows remote attackers to cause a denial of service crash via an A tag with an href attribute with a URL containing a long hostname, which triggers an out-of-bounds operation...

CVE-2006-3198

Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large height and width values, which causes less memory to be allocated than intended...

CVE-2006-3198

Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large height and width values, which causes less memory to be allocated than intended...

CVE-2006-3199

Opera 9 allows remote attackers to cause a denial of service crash via an A tag with an href attribute with a URL containing a long hostname, which triggers an out-of-bounds operation...

CVE-2006-3198

CVE-2006-3198 affects Opera 8.54 and earlier. An integer overflow in JPEG handling may cause memory under-allocation, leading to a buffer overflow and possible arbitrary code execution. Public docs indicate upgrading to Opera 9.0 or newer as the remediation.

CVE-2006-3199

The entries describe a vulnerability in Opera 9 where remote attackers can cause a denial of service (crash) by crafting an A tag href containing a URL with a long hostname, triggering an out-of-bounds operation. Affected software: Opera 9 (web rendering/input handling related to HTML anchor href...