4492 matches found
Opera Information Disclosure and Unspecified Vulnerabilities - (Windows)
The host is installed with Opera Web Browser and is prone to Information Disclosure and other unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperainfodiscunspecifiedvulnwin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Information Disclosure and Unspecified Vulnerabilities -...
openSUSE Security Update : opera (opera-1599)
Opera was upgraded to version 10.10 to fix the following security bugs : - CVE-2009-0689: CVSS v2 Base Score: 6.8 A heap buffer overflow in string to number conversion. - Error messages could leak information. - Another, yet unspecified, vulnerability reported by Chris Evans. %NASLMINLEVEL 70300 ...
openSUSE Security Update : opera (opera-1599)
Opera was upgraded to version 10.10 to fix the following security bugs : - CVE-2009-0689: CVSS v2 Base Score: 6.8 A heap buffer overflow in string to number conversion. - Error messages could leak information. - Another, yet unspecified, vulnerability reported by Chris Evans. %NASLMINLEVEL 70300 ...
Opera < 10.10 Multiple Vulnerabilities
The version of Opera installed on the remote host is earlier than 10.10. Such versions are potentially affected by multiple issues : - Error messages can leak onto unrelated sites which could lead to cross-site scripting attacks. 941 - Passing very long strings through the string to number...
CVE-2009-4072
Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a "moderately severe issue."...
Code injection
Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a "moderately severe issue."...
CVE-2009-4071
Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting XSS attacks via unspecified vectors...
CVE-2009-4071
Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting XSS attacks via unspecified vectors...
CVE-2009-4072
Opera 9.x/10.x vulnerable to CVE-2009-4072 (and related CVEs) as part of a set of high‑severity vulnerabilities. Affected product: Opera Web Browser (Windows/Linux). Issue type: Information Disclosure and unspecified vulnerabilities with potential for arbitrary code execution or DoS. Root cause/i...
CVE-2009-4071
CVE-2009-4071 affects the Opera web browser (notably Opera on Linux/Unix paths in the connected records) where, when exception stacktraces are enabled, scripting error messages from a site can be read by a different site, enabling information disclosure and cross-site scripting via unspecified ve...
CVE-2009-4072
Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a "moderately severe issue."...
Opera < 10.10 Multiple Vulnerabilities
Binary data 800847.prm...
Opera Web出错消息跨站脚本漏洞
BUGTRAQ ID: 37089 Opera是一款流行的WEB浏览器，支持多种平台。 正常情况下仅应在导致错误的页面上出现脚本出错消息，但在某些情况下可以无关变量内容的形式向其他站点传送出错消息，其中可能包含有敏感信息。如果这些站点将内容写入到了页面标记中，就可以使用攻击站点所提供的代码执行跨站脚本攻击。这个漏洞仅影响启用了对异常的栈追踪的系统（默认为禁用）。 Opera Software Opera 10.01 厂商补丁： Opera Software -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Opera < 10.10 Multiple Vulnerabilities
Binary data 5241.prm...
Opera Fixes Vulnerability with Latest Upgrade
With version 10.10 Opera Unite of its browser, Opera has fixed a format string vulnerability which can potentially be exploited to compromise systems. Read the full article. The H Security...
opera -- multiple vulnerabilities
Opera Team reports: Fixed a heap buffer overflow in string to number conversion Fixed an issue where error messages could leak onto unrelated sites Fixed a moderately severe issue, as reported by Chris Evans of the Google Security Team; details will be disclosed at a later date...
Opera 10.01 Remote Array Overrun (Arbitrary code execution)
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Opera 10.01 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 20.11.2009 CVE: CVE-2009-0689 Risk: High Remote: Yes...
PHP - MultiPart Form-Data Denial of Service (PoC)
!/usr/bin/python PHP MultiPart Form-Data Denial of Service proof of concept, 23-10-2009 Bogdan Calin [email protected] import httplib, urllib, sys, string, threading from string import replace from urlparse import urlparse def usage: print "" print " PHP MultiPart Form-Data Denial of Service...
KDE KDELibs 4.3.3 Remote Array Overrun (Arbitrary code execution)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE KDELibs 4.3.3 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 20.11.2009 CVE: CVE-2009-0689 Risk: High Remote: Yes Affected Software: - - KDELibs...
Heap buffer overflow in string to number conversion
Passing very long strings through the string to number conversion using JavaScript in Opera may result in heap buffer overflows. This also affects the dtoa routine, and was reported in CVE-2009-0689. In most cases Opera will just freeze or terminate, but in some cases this could lead to a crash...