CVE-2011-2641

CVE-2011-2641 affects Opera 11.11, where remote attackers can crash the app by manipulating the FONT element’s FACE attribute inside an IFRAME after setting the IFRAME SRC to about:blank. This vulnerability enables a Denial of Service and is documented with an exploit reference (exploit-db). Publ...

CVE-2011-2621

Opera before 11.50 is vulnerable to a remote denial of service (crash) through form-layout related vectors. The vulnerability is described across multiple connected sources as an unspecified issue allowing remote exploitation, with remediation involving upgrading to Opera 11.50 or newer (as noted...

CVE-2011-2636

Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service application crash via unknown content on a web page, as demonstrated by a certain Tomato Firmware page...

CVE-2011-2610

CVE-2011-2610 is an Opera browser vulnerability affecting versions before 11.50, described as an unspecified issue with unknown impact and attack vectors. The CVSS metrics in the initial record indicate a high-risk, network-exploitable flaw (AV:N/AC:L/Au:N/C:C/I:C/A:C; base score 10.0). Public ma...

CVE-2011-2636

Summary: CVE-2011-2636 affects the Opera browser prior to 11.10 and could cause a denial of service (application crash) when processing unknown content on a web page, as illustrated by a Tomato Firmware page. The OpenVAS/Gentoo/SUSE/Red Hat entries corroborate multiple vendors’ advisories for Ope...

CVE-2011-2634

Opera before 11.10 allows remote attackers to hijack 1 searches and 2 customizations via unspecified third party applications...

CVE-2011-2637

Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service application crash via unknown content on a web page, as demonstrated by futura-sciences.com, seoptimise.com, and mitosyfraudes.org...

CVE-2011-2616

Summary (CVE-2011-2616) : An unspecified vulnerability in Opera prior to 11.50 could be exploited remotely to cause a denial of service via memory consumption on a web page (demonstrated by test262.ecmascript.org). The connected documents consistently identify Opera as the affected product and de...

Opera < 11.50 Multiple Vulnerabilities

The version of Opera installed on the remote Windows host is earlier than 11.50 and thus potentially affected by multiple vulnerabilities: - An error exists in the handling of data URIs that allows cross-site scripting in some unspecified cases. Issue 995 - An error exists in the browser's handli...

Opera Web Browser未明跨站脚本漏洞

Bugtraq ID: 48500 Opera是一款流行的WEB浏览器。 当处理"data" URL机制时存在错误，没有针对URI做强制的安全上下文继承，允许URI与其他页和源代码页面交互。可造成跨站脚本攻击。 Opera Software Opera Web Browser 11.11 Opera Software Opera Web Browser 11.01 Opera Software Opera Web Browser 11.00 Opera Software Opera Web Browser 10.63 Opera Software Opera Web Browser...

Opera Web Browser URL处理拒绝服务漏洞

Bugtraq ID: 48501 Opera是一款流行的WEB浏览器。 当尝试处理一个不能解析为合法URL的URL时，当装载时Opera会创建一个错误页显示给用户。如果创建了足够的非法URL，Opera会创建这些错误页面消耗所有磁盘控件，导致浏览器或系统崩溃。 Opera Software Opera Web Browser 11.11 Opera Software Opera Web Browser 11.01 Opera Software Opera Web Browser 11.00 Opera Software Opera Web Browser 10.63 Opera...

Opera < 11.50 Multiple Vulnerabilities

Binary data 800843.prm...

Opera < 11.50 Multiple Vulnerabilities

Binary data 5971.prm...

Issue with error pages can cause a system crash

When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...

Issue with error pages can cause a system crash – Opera Security Advisories

When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...

Data URIs may be used to initiate cross site scripting against unrelated sites

Data URIs are supposed to inherit the security context from the page that created them. In some cases, Opera does not enforce this correctly, and will allow unrelated data URIs to interact both with each other, and their source pages. This can be used to enable cross site scripting against the...

Data URIs may be used to initiate cross site scripting against unrelated sites – Opera Security Advisories

Data URIs are supposed to inherit the security context from the page that created them. In some cases, Opera does not enforce this correctly, and will allow unrelated data URIs to interact both with each other, and their source pages. This can be used to enable cross site scripting against the...

opera (important)

opera 11.11 fixes a security vulnerability. Citing http://www.opera.com/support/kb/view/992/: Framesets allow web pages to hold other pages inside them. Certain frameset constructs are not handled correctly when the page is unloaded, causing a memory corruption. To inject code, additional...

Opera Web Browser 11.11拒绝服务漏洞

Bugtraq ID: 48262 Opera Web Browser是一款开源的WEB服务器。 Opera Web Browser不正确处理特制HTML元素，远程攻击者构建恶意WEB页，诱使用户解析，可导致应用程序崩溃。 Opera Web Browser 11.11 厂商解决方案 目前没有详细解决方案提供： http://www.opera.com/ html body iframe src=about:blank id=bo0om style="width:0px;height:0px;border:0px none;"/iframe script...

Opera Web Browser 11.11 - Denial of Service

Opera Web Browser 11.11 - Denial of Service source: https://www.securityfocus.com/bid/48262/info The Opera Web Browser is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Opera Web Browser 11.11 ...