PT-2011-2557

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.01 Description The issue is related to an integer truncation error in the opera.dll component. This error can be triggered by an HTML form containing a select element with a large number of children, potentially...

PT-2011-2559

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.01 Description The issue allows remote web servers to obtain access to local files and use them as page resources. This could lead to the disclosure of potentially sensitive information from the contents of these...

PT-2011-2353

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.01 Description The issue is related to the downloads manager in Opera, which does not properly determine the pathname of the filesystem-viewing application. This allows remote attackers to execute arbitrary code via ...

CVE-2011-0450: Undefined Security Weakness

The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote attackers to execute arbitrary code via a crafted web site that hosts an executable file...

CVE-2011-0686: Undefined Security Weakness

Unspecified vulnerability in Opera before 11.01 allows remote attackers to cause a denial of service application crash via unknown content on a web page, as demonstrated by vkontakte.ru...

CVE-2011-0683: Undefined Security Weakness

Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

CVE-2011-0681: Undefined Security Weakness

The Cascading Style Sheets CSS Extensions for XML implementation in Opera before 11.01 recognizes links to javascript: URLs in the -o-link property, which makes it easier for remote attackers to bypass CSS filtering via a crafted URL...

PT-2011-2561

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.01 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via unknown content on a web page. Recommendations For versions prior to 11.01, update to version 11.0...

CVE-2011-0687: Improper Input Validation

Opera before 11.01 does not properly implement Wireless Application Protocol WAP dropdown lists, which allows user-assisted remote attackers to cause a denial of service application crash via a crafted WAP document...

CVE-2011-0685: Improper Input Validation

The Delete Private Data feature in Opera before 11.01 does not properly implement the "Clear all email account passwords" option, which might allow physically proximate attackers to access an e-mail account via an unattended workstation...

PT-2011-2556

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.01 Description The issue concerns the Cascading Style Sheets CSS Extensions for XML implementation, which recognizes links to javascript: URLs in the -o-link property. This makes it easier for remote attackers to...

CVE-2011-0684: Improper Input Validation

Opera before 11.01 does not properly handle redirections and unspecified other HTTP responses, which allows remote web servers to obtain sufficient access to local files to use these files as page resources, and consequently obtain potentially sensitive information from the contents of the files,...

PT-2011-2560

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.01 Description The issue is related to the improper implementation of the "Clear all email account passwords" option in the Delete Private Data feature. This might allow physically proximate attackers to access an...

Opera 11.01 Released

Opera Software has released version 11.01 of the Opera web browser for Windows, Mac, and Unix to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, bypass security restrictions, or obtain...

The wrong executable may be used to display a downloaded file in its folder

Opera's downloads manager allows users to select a file, and open the folder containing that file. This file will be opened using the operating system's file system viewer. In some cases, Opera will use the wrong executable when trying to show the folder view, and that executable may execute code...

The wrong executable may be used to display a downloaded file in its folder – Opera Security Advisories

The wrong executable may be used to display a downloaded file in its folder – Opera Security Advisories OPCOM Team | January 28, 2011 Severity Low Affected versions This issue affects Opera for Microsoft Windows. Description Opera’s downloads manager allows users to select a file, and open the...

Opera Closes Critical Security Flaw With Version 11.01

Opera has released a new version of its flagship browser, which, among other things, fixes a remotely exploitable critical vulnerability that was disclosed late last week. Opera 11.01 also includes some other stability upgrades. The new version of Opera for Windows has fixes for a total of five...

Opera < 11.01 Multiple Vulnerabilities

Binary data 800855.prm...

Opera < 11.01 Multiple Vulnerabilities

The version of Opera installed on the remote Windows host is earlier than 11.01. Such versions are potentially affected by the following issues : - The Cascading Style Sheets CSS Extensions for XML implementation recognizes links to javascript: URLs in the -o-link property, which could be abused ...

Opera Web Browser 11.00 Integer Overflow Vulnerability

Exploit for windows platform in category dos / poc +Exploit Title: Exploit Integer Overflow Opera Web Browser 11.00 +Date: 24\01\2011 +Author: C4SS!0 G0M3S +Software Link: http://get12.opera.com/pub/opera/win/1100/int/Opera1100intSetup.exe +Version: 11.00 +Tested On: WIN-XP SP3 PORTUGUESE BRAZILI...