Opera SVG - Use-After-Free

!CDATA //Author=Cons0ul var b = new Array; // this is our spray function where spray is allocated on LFH with exact size 0x78 // so 0x78 size of block is created so far we are creating 0x50000 blocks // to create 0x78 blocks we are using ArrayBuffer; function fengshui...

FreeBSD : opera -- execution of arbitrary code (ea0f45e2-6c4b-11e2-98d9-003067c2616f)

Opera reports : Particular DOM event manipulations can cause Opera to crash. In some cases, this crash might occur in a way that allows execution of arbitrary code. To inject code, additional techniques would have to be employed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

CVE-2013-1489

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and...

Security feature bypass

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and...

Opera < 12.13 Multiple Vulnerabilities

Binary data 800848.prm...

Opera < 12.13 Multiple Vulnerabilities

Binary data 6680.prm...

Opera Browser Update Patches Remote Code Execution Vulnerabilities

A number of security vulnerabilities were repaired in the latest version of the Opera browser, which was released today. However, a security researcher says that users who downloaded the browser from Apple’s Mac App Store won’t have access to version 12.13; in fact you’ll be two revs behind as of...

Opera < 12.13 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 12.13 and is, therefore, reportedly affected by the following vulnerabilities : - An error exists related to DOM manipulation that could lead to application crashes or arbitrary code execution. 1042 - A use-after-free error exists...

opera -- execution of arbitrary code

Opera reports: Particular DOM event manipulations can cause Opera to crash. In some cases, this crash might occur in a way that allows execution of arbitrary code. To inject code, additional techniques would have to be employed...

PT-2013-3290

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.13 Description The issue allows remote attackers to execute arbitrary code via vectors involving DOM events. Recommendations For Opera versions prior to 12.13, update to version 12.13 or later to resolve the issue...

Use of SVG clipPaths can allow execution of arbitrary code – Opera Security Advisories

When SVG documents with specifically prepared clipPaths are used in Opera, Opera may allow other content to overwrite the memory, before referencing the memory, which will lead to a crash. If an attacker can control the contents being written into memory, execution of arbitrary code may occur...

DOM events manipulation might be used to execute arbitrary code

Particular DOM event manipulations can cause Opera to crash. In some cases, this crash might occur in a way that allows execution of arbitrary code. To inject code, additional techniques would have to be employed...

Use of SVG clipPaths can allow execution of arbitrary code

When SVG documents with specifically prepared clipPaths are used in Opera, Opera may allow other content to overwrite the memory, before referencing the memory, which will lead to a crash. If an attacker can control the contents being written into memory, execution of arbitrary code may occur...

CORS requests can omit the preflight request

Cross-Origin Resource Sharing CORS requests are required to send a preflight request if custom headers are included, to check that the host wishes to allow the full request to be made. An example of where this may be needed is for sites that use a custom header with a static value as part of thei...

DOM events manipulation might be used to execute arbitrary code – Opera Security Advisories

DOM events manipulation might be used to execute arbitrary code – Opera Security Advisories OPCOM Team | January 29, 2013 Severity: High Description: Particular DOM event manipulations can cause Opera to crash. In some cases, this crash might occur in a way that allows execution of arbitrary code...

Opera - security update to 12.11 (important)

Opera 12.11 is a recommended upgrade offering security and stability enhancements: -fixed an issue where HTTP response heap buffer overflow could allow execution of arbitrary code; -fixed an issue where error pages could be used to guess local file paths; see our advisory -fixed several issues...

Recommended to 12.10 (important)

Fixed security issues: -an issue that could cause Opera not to correctly check for certificate revocation; -an issue where CORS requests could incorrectly retrieve contents of cross origin pages; -an issue where data URIs could be used to facilitate Cross-Site Scripting; -a high severity issue, a...

Opera Multiple Vulnerabilities-02 Jan13 (Mac OS X)

The host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvuln02jan13macosx.nasl 6074 2017-05-05 09:03:14Z teissa $ Opera Multiple Vulnerabilities-02 Jan13 Mac OS X Authors: Antu Sanadi Copyright: Copyright c 2013 Greenbone Networks GmbH...

Opera Multiple Vulnerabilities-03 Jan13 (Linux)

The host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvuln03jan13lin.nasl 6065 2017-05-04 09:03:08Z teissa $ Opera Multiple Vulnerabilities-03 Jan13 Linux Authors: Antu Sanadi Copyright: Copyright c 2013 Greenbone Networks GmbH,...

Opera Multiple Vulnerabilities-02 Jan13 (Windows)

The host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvuln02jan13win.nasl 6115 2017-05-12 09:03:25Z teissa $ Opera Multiple Vulnerabilities-02 Jan13 Windows Authors: Antu Sanadi Copyright: Copyright c 2013 Greenbone Networks GmbH,...