Opera DoS Vulnerability (Nov 2009) - Linux

Opera Web Browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : opera -- multiple vulnerabilities (2fda6bd2-c53c-11de-b157-001999392805)

Opera Team Reports : - Fixed an issue where certain domain names could allow execution of arbitrary code, as reported by Chris Weber of Casaba Security - Fixed an issue where scripts can run on the feed subscription page, as reported by Inferno %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Authentication flaw

Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site...

Memory corruption

Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted domain name...

CVE-2009-3831

Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted domain name...

CVE-2009-3832

Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site...

CVE-2009-3831

Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted domain name...

CVE-2009-3832

Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site...

CVE-2009-3831

CVE-2009-3831 affects Opera browser prior to 10.01. The flaw allows remote attackers to cause memory corruption and possible arbitrary code execution or a denial of service by supplying a crafted domain name. Multiple vendor advisories/OSS notes indicate the fix is to upgrade to Opera 10.1 or new...

CVE-2009-3832

Opera for Windows prior to 10.01 is affected by CVE-2009-3832 due to the browser rendering UI using web fonts, allowing a crafted site to spoof the address bar. Root cause: Web fonts used in the UI are not prevented in rendering. Impact is spoofing the address field; exploitation status is not do...

Opera Web浏览器10.01之前版本多个安全漏洞

BUGTRAQ ID: 36850 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的10.01之前版本中存在多个安全漏洞，可能允许恶意用户读取敏感信息、执行任意指令或执行欺骗攻击。 1 处理域名时的内存破坏可能导致执行任意代码。 2 Opera可能允许在源订阅页面上运行脚本以获得对源对象的访问，这可能导致自动订阅源或读取其他源。 3 在Windows上处理Web字体时的错误可能导致更改地址字段的字体，在地址中显示任意域名。 Opera Software Opera Web Browser 10.01 厂商补丁： Opera Software --------------...

CVE-2009-3832: URL Redirection to Untrusted Site

Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site...

CVE-2009-3831: Out-of-bounds Write

Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted domain name...

Hijacking Opera's Native Page using malicious RSS payloads

Hijacking Opera's Native Page using malicious RSS payloads ---------------------------------------------------------------------------- --------- For complete post with images, please visit - http://securethoughts.com/2009/10/hijacking-operas-native-page-using-malicio us-rss-payloads/ Well, this...

Opera code execution

Code execution via RSS feeds...

Code Execution Bug Bites Opera Browser

On the same day Mozilla shipped a Firefox update to fix multiple critical vulnerabilities, Opera dropped a major patch to fix three documented flaws, including a memory corruption issue that exposes users to code execution attacks. Here are the raw details: Advisory 1: Specially crafted domain...

Opera < 10.01 Multiple Vulnerabilities

Binary data 800863.prm...

Opera < 10.01 Multiple Vulnerabilities

Binary data 5217.prm...

opera -- multiple vulnerabilities

Opera Team Reports: Fixed an issue where certain domain names could allow execution of arbitrary code, as reported by Chris Weber of Casaba Security Fixed an issue where scripts can run on the feed subscription page, as reported by Inferno...

Opera < 10.01 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 10.01. Such versions are potential affected by multiple issues : - Specially crafted domain names can cause a memory corruption in Opera, which may lead to a crash or possibly remote code execution. 938 - Opera may allow scripts to...