CVE-2011-0687

Opera before 11.01 does not properly implement Wireless Application Protocol WAP dropdown lists, which allows user-assisted remote attackers to cause a denial of service application crash via a crafted WAP document...

CVE-2011-0683

Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

CVE-2011-0684

Opera before 11.01 does not properly handle redirections and unspecified other HTTP responses, which allows remote web servers to obtain sufficient access to local files to use these files as page resources, and consequently obtain potentially sensitive information from the contents of the files,...

CVE-2011-0687

Opera before 11.01 is vulnerable to a denial-of-service via crafted WAP documents that abuse WAP dropdown lists, caused by input validation issues (CWE-20). The issue can crash the application, with CVSS v2 base score 4.3 (Medium). Affected product/version: Opera up to 11.01 (as described in mult...

CVE-2011-0682

Integer truncation error in opera.dll in Opera before 11.01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via an HTML form with a select element that contains a large number of children...

Code injection

The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote attackers to execute arbitrary code via a crafted web site that hosts an executable file...

CVE-2011-0684

The connected sources confirm CVE-2011-0684 affects Opera prior to 11.01, where improper handling of redirections and certain HTTP responses could allow a remote server to access local files and exfiltrate their contents via local resources. The issue is tied to input validation in redirection ha...

CVE-2011-0686

CVE-2011-0686 concerns Opera before 11.01, where remote attackers could trigger a denial of service (application crash) by serving crafted content on a web page (as demonstrated by vkontakte.ru). The issue affects Opera's handling of web-page content and results in an availability impact (crash) ...

CVE-2011-0681

CVE-2011-0681 affects Opera before 11.01. The CSS Extensions for XML implementation recognizes javascript: URLs in the -o-link property, enabling bypass of CSS filtering. Opera 11.01 fixes this by upgrading. The connected documents confirm the specific mechanism and the fixed version; exploitatio...

CVE-2011-0683

Opera before 11.01 did not properly restrict opera: URLs, enabling clickjacking via a crafted site. A remote attacker could lure a user to a malicious page to perform a clickjacking attack. Affected: Opera up to version 11.00; remediation: upgrade to Opera 11.01 or later where the issue is fixed....

CVE-2011-0682

CVE-2011-0682 is an Opera vulnerability caused by an integer truncation in opera.dll that can be triggered by an HTML form with a select element containing a large number of children. The issue could allow remote arbitrary code execution or memory corruption. Opera 11.01 addresses this vulnerabil...

CVE-2011-0685

The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically proximate attackers to access an e-mail account via an unattended workstation...

CVE-2011-0685

CVE-2011-0685 affects Opera before 11.01 where the Delete Private Data feature’s Clear all email account passwords option was not properly implemented, potentially allowing a physically proximate attacker to access an email account on an unattended workstation. Connected advisories (SUSE/OpenSUSE...

CVE-2011-0686

Unspecified vulnerability in Opera before 11.01 allows remote attackers to cause a denial of service application crash via unknown content on a web page, as demonstrated by vkontakte.ru...

CVE-2011-0450

The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote attackers to execute arbitrary code via a crafted web site that hosts an executable file...

CVE-2011-0450

Opera before 11.01 on Windows is affected by CVE-2011-0450 due to the downloads manager failing to correctly determine the pathname of the filesystem-viewing application. This can allow a user-assisted remote attacker to execute arbitrary code via a crafted web site that hosts an executable file....

CVE-2011-0682: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer truncation error in opera.dll in Opera before 11.01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via an HTML form with a select element that contains a large number of children...

PT-2011-2562

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.01 Description The issue is related to the improper implementation of Wireless Application Protocol WAP dropdown lists. This allows remote attackers to cause a denial of service, resulting in an application crash, vi...

Update Protection against Opera Browser Document Writing Uninitialized Memory Access

A ulnerability was reported in Opera web browser, a web browser and Internet suite developed by the Opera Software company. The vulnerability is due to an error while handling asynchronous modifications to an HTML document. A remote attacker can exploit this issue by convincing a target user to...

PT-2011-2558

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.01 Description The issue makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site, due to improper restriction of the use of opera: URLs. Recommendations For Opera versions prior to...