PT-2011-3975

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.50 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by using injected script to set the SRC attribute of an IFRAME element. Recommendatio...

PT-2011-3982

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.11 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved through vectors involving a Certificate Revocation List CRL file. Recommendations...

CVE-2011-2638: Undefined Security Weakness

Unspecified vulnerability in Opera before 11.10 allows remote attackers to cause a denial of service application crash via unknown content on a web page, as demonstrated by games on zylom.com...

CVE-2011-2617: Undefined Security Weakness

Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service application crash via vectors related to selecting a text node, and closed pop-up windows, removed pop-up windows, and IFRAME elements...

CVE-2011-2631: Improper Input Validation

The Cascading Style Sheets CSS implementation in Opera before 11.11 does not properly handle the column-count property, which allows remote attackers to cause a denial of service infinite repaint loop and application hang via a web page, as demonstrated by an unspecified Wikipedia page...

PT-2011-3983

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.10 Description The issue allows remote attackers to hijack searches and customizations via unspecified third-party applications. Recommendations For Opera versions prior to 11.10, update to version 11.10 or later to...

PT-2011-3972

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.50 Description The issue is related to an unspecified vulnerability in the SVG BiDi implementation, allowing remote attackers to cause a denial of service, which can result in an application crash or hang...

PT-2011-3960

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.50 Description The issue is related to an unspecified vulnerability in the printing functionality, allowing user-assisted remote attackers to cause a denial of service, resulting in an application crash, via a crafte...

Opera Web Browser未明跨站脚本漏洞

Bugtraq ID: 48500 Opera是一款流行的WEB浏览器。 当处理"data" URL机制时存在错误，没有针对URI做强制的安全上下文继承，允许URI与其他页和源代码页面交互。可造成跨站脚本攻击。 Opera Software Opera Web Browser 11.11 Opera Software Opera Web Browser 11.01 Opera Software Opera Web Browser 11.00 Opera Software Opera Web Browser 10.63 Opera Software Opera Web Browser...

Opera Web Browser URL处理拒绝服务漏洞

Bugtraq ID: 48501 Opera是一款流行的WEB浏览器。 当尝试处理一个不能解析为合法URL的URL时，当装载时Opera会创建一个错误页显示给用户。如果创建了足够的非法URL，Opera会创建这些错误页面消耗所有磁盘控件，导致浏览器或系统崩溃。 Opera Software Opera Web Browser 11.11 Opera Software Opera Web Browser 11.01 Opera Software Opera Web Browser 11.00 Opera Software Opera Web Browser 10.63 Opera...

Opera < 11.50 Multiple Vulnerabilities

The version of Opera installed on the remote Windows host is earlier than 11.50 and thus potentially affected by multiple vulnerabilities: - An error exists in the handling of data URIs that allows cross-site scripting in some unspecified cases. Issue 995 - An error exists in the browser's handli...

Issue with error pages can cause a system crash

When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...

Opera < 11.50 Multiple Vulnerabilities

Binary data 800843.prm...

Opera < 11.50 Multiple Vulnerabilities

Binary data 5971.prm...

Issue with error pages can cause a system crash – Opera Security Advisories

When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...

Data URIs may be used to initiate cross site scripting against unrelated sites

Data URIs are supposed to inherit the security context from the page that created them. In some cases, Opera does not enforce this correctly, and will allow unrelated data URIs to interact both with each other, and their source pages. This can be used to enable cross site scripting against the...

Data URIs may be used to initiate cross site scripting against unrelated sites – Opera Security Advisories

Data URIs are supposed to inherit the security context from the page that created them. In some cases, Opera does not enforce this correctly, and will allow unrelated data URIs to interact both with each other, and their source pages. This can be used to enable cross site scripting against the...

opera (important)

opera 11.11 fixes a security vulnerability. Citing http://www.opera.com/support/kb/view/992/: Framesets allow web pages to hold other pages inside them. Certain frameset constructs are not handled correctly when the page is unloaded, causing a memory corruption. To inject code, additional...

Opera Web Browser 11.11拒绝服务漏洞

Bugtraq ID: 48262 Opera Web Browser是一款开源的WEB服务器。 Opera Web Browser不正确处理特制HTML元素，远程攻击者构建恶意WEB页，诱使用户解析，可导致应用程序崩溃。 Opera Web Browser 11.11 厂商解决方案 目前没有详细解决方案提供： http://www.opera.com/ html body iframe src=about:blank id=bo0om style="width:0px;height:0px;border:0px none;"/iframe script...

Opera Web Browser 11.11 Remote Crash

Exploit for windows platform in category dos / poc / Opera 11.11 Remote Crash Software link: http://www.opera.com/download/ Tested on: Win32 xp home sp 3 CVE : null Im too lazy to deep analyze this ,but i thing is just unexploitable crash so fjixvt dla klechis³awa i jego kosiarki :i / var a =...