Opera server breach incident

News Opera server breach incident Share August 26th, 2016 Earlier this week, we detected signs of an attack where access was gained to the Opera sync system. This attack was quickly blocked. Our investigations are ongoing, but we believe some data, including some of our sync users’ passwords and...

Proxy auto-config (PAC) files have access to full HTTPS URLs

Overview Web proxy auto-config PAC files are passed the full HTTPS URL in GET requests which may expose sensitive data. Description CWE-212: Improper Cross-boundary Removal of Sensitive Data - CVE-2016-5134 Google, CVE-2016-1801 AppleWeb proxy auto-configuration files proxy.pac have access to the...

PT-2016-6262

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.116 Opera affected versions not specified Description The Web Cryptography API implementation in Blink does not properly copy data buffers, allowing remote attackers to cause a denial of service or...

PT-2016-6264

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.116 Opera affected versions not specified Description The issue arises from the mishandling of the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter in the Developer Tools...

PT-2016-6266

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.116 Opera affected versions not specified Description The issue involves multiple unspecified vulnerabilities that allow attackers to cause a denial of service or possibly have other impact via unknown...

PT-2016-6265

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.116 Opera affected versions not specified Description The issue arises from the handling of a taint property after a structure-clone operation on an ImageBitmap object derived from a cross-origin image...

PT-2016-6259

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 52.0.2743.116 Google Chrome versions prior to 52.0.2743.116 Opera versions prior to 52.0.2743.116 Description The issue is caused by multiple integer overflows in the opj tcd init tile function in tcd.c in OpenJPEG,...

PT-2016-6263

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.116 Opera affected versions not specified Description The Developer Tools subsystem in Blink mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, allowing remote...

PT-2016-2710

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera versions prior to 52.0.2743.82 Description The issue is related to the WebKit component in the Blink browser, specifically the HTMLPreloadScanner.cpp file. It concerns the lack of checking for...

PT-2016-6251

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera affected versions not specified Description The issue is related to a use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink. This vulnerability can be exploited ...

PT-2016-2709

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera affected versions not specified Description The issue is related to a use-after-free vulnerability in the Extensions subsystem, specifically in the extensions/renderer/user script injector.cc...

PT-2016-2711

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera affected versions not specified Description The issue is related to the Proxy Auto-Config PAC feature, where the net/proxy/proxy service.cc file does not restrict URL information to a scheme,...

PT-2016-2659

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera affected versions not specified Description The issue is related to the PPAPI implementation in Google Chrome and Opera, where the origin of IPC messages to the plugin broker process is not...

PT-2016-2655

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera affected versions not specified Description The issue concerns the ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink. This method does not prevent window...

PT-2016-2708

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera affected versions not specified Description The issue is related to the CSPSource::schemeMatches function in the Content Security Policy CSP implementation in Blink. This function does not app...

PT-2016-6257

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera affected versions not specified Description The issue concerns the mishandling of origin information during proxy authentication. This allows man-in-the-middle attackers to spoof a...

PT-2016-6256

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera affected versions not specified Description The issue is related to the Service Workers subsystem not properly implementing the Secure Contexts specification. This allows remote attackers to...

PT-2016-6254

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera affected versions not specified Description The issue allows remote attackers to spoof the URL display via a crafted web site due to improper restriction of multiple uses of a JavaScript forwa...

PT-2016-6252

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Google V8 versions prior to 5.2.361.27 Opera affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy via a crafted web site, due to the failure...

PT-2016-2654

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera affected versions not specified Description The issue is related to the WebKit/Source/core/loader/FrameLoader.cpp file in the Blink component, which does not properly disable frame navigation...