4492 matches found
Opera <= 8.02 Remote Denial of Service Exploit
No description provided by source. !-- Vulnerable: Opera 8.02 and below Date: 19.05.2005 Discovered: [email protected] -- htmlhead/headbodybdoAbgsound style="margin:-99;"AhrAhr/body/html milw0rm.com 2005-10-16...
Opera 8.02 - Remote Denial of Service (2)
\n" html.write"\n" buff1 = 'A'32499 html.write"\n"+buff1+"\n" buff2 = 'B'153 html.write"\n" html.write"" html.close Cheers! --...
SUSE-SA:2005:057: opera
The remote host is missing the patch for the advisory SUSE-SA:2005:057 opera. This update upgrades the Opera web browser to the 8.50 release. Besides the changes in 8.50 that are listed in http://www.opera.com/docs/changelogs/linux/850/ following security problems were fixed: 1. Attached files ar...
Malicious setRequestHeader cross-site vulnerability – Opera Security Advisories
Malicious setRequestHeader cross-site vulnerability – Opera Security Advisories OPCOM Team | September 29, 2005 Summary A malicious setRequestHeader can be used to stealuser credentials and inject cross-site JavaScript. Severity: high Opera’s response Since version 8.02 of Opera, double newlineso...
CVE-2005-3059
Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to 1 " handling of must-revalidate cache directive for HTTPS pages" or 2 a "display issue with cookie comment encoding."...
CVE-2005-3059
Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to 1 " handling of must-revalidate cache directive for HTTPS pages" or 2 a "display issue with cookie comment encoding."...
CVE-2005-3059
CVE-2005-3059 affects Opera 8.50 on Linux and Windows. The vulnerabilities are described as multiple unspecified issues tied to (1) handling of the must-revalidate cache directive for HTTPS pages and (2) a cookie comment encoding display issue. The connected documents do not provide concrete expl...
CVE-2005-3041
Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file uploads."...
CVE-2005-3041
CVE-2005-3041 concerns Opera for Windows versions before 8.50. The issue is a drag‑and‑drop vulnerability described as an unspecified flaw that enables unintentional file uploads. The NVD entry lists a base score of 5.0 (Medium) with network attack vector, low complexity, and partial integrity im...
CVE-2005-3041
Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file uploads."...
CVE-2005-3006
The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames...
CVE-2005-3007
Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." dot, which might allow remote attackers to trick users into processing dangerous content...
CVE-2005-3006
The CVE for Opera (CVE-2005-3006) is a confirmed vulnerability in the Opera mail client prior to version 8.50. The issue arises because the mail client opens attached files from the user’s cache directory without warning, potentially allowing remote attackers to inject arbitrary web script and sp...
CVE-2005-3007
Opera before 8.50 is affected by a vulnerability where appending a trailing dot to a filename spoofed the content type, potentially tricking users into processing dangerous content. The issue concerns the browser’s handling of file-type presentation rather to content-type verification, enabling m...
CVE-2005-3006
The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames...
CVE-2005-3007
Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." dot, which might allow remote attackers to trick users into processing dangerous content...
Multiple Opera Mail agent vulnerabilities
Attached files are opened from local cache making it's possible to execute javascript in context of "file://". By adding ',' character to file extension it's possible to bypass content filtering...
Secunia Research: Opera Mail Client Attachment Spoofing and ScriptInsertion
====================================================================== Secunia Research 20/09/2005 - Opera Mail Client Attachment Spoofing and Script Insertion - ====================================================================== Table of Contents Affected...
Opera < 8.50 Multiple Vulnerabilities
The remote host is using Opera, an alternative web browser. The installed version of Opera on the remote host contains two flaws its mail client and one in the browser. First, message attachments are opened from the user's cache directory without any warnings, which can be exploited to execute...