Java Vulnerabilities in Opera 7.54

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Illegalaccess.org Advisory: Opera 7.54 Java vulnerabilities Author: Marc Schnefeld, www.illegalaccess.org Summary Opera 7.54 is vulnerable to leakage of the java sandbox, allowing malicious applets to gain unacceptable privileges. This allows them to ...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (2)

source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may allow an attacker to craft a Java...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (4)

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities 4 source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Ja...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (1)

source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may allow an attacker to craft a Java...

opera Web browser 7.54 java implementation - Multiple Vulnerabilities (3)

source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may allow an attacker to craft a Java...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (4)

source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may allow an attacker to craft a Java...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (1)

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities 1 source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Ja...

opera Web browser 7.54 java implementation - Multiple Vulnerabilities (3)

opera Web browser 7.54 java implementation - Multiple Vulnerabilities 3 source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Ja...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (2)

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities 2 source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Ja...

Opera < 7.55.0 Cross-Domain Dialog Box Spoofing

Binary data 2373.prm...

CVE-2004-1615

Opera allows remote attackers to cause a denial of service invalid memory reference and application crash via a web page or HTML email that contains a TBODY tag with a large COL SPAN value, as demonstrated by mangleme...

CVE-2004-0872

Opera does not prevent cookies that are sent over an insecure channel HTTP from also being sent over a secure channel HTTPS/SSL in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."...

Opera < 7.54.0 Empty CCCC Object JavaScript-based DoS

Binary data 2259.prm...

Opera < 7.54 Empty Embedded Object DoS

The version of Opera installed on the remote host contains a flaw that allows an attacker to crash this browser remotely. To exploit this flaw, an attacker would need to craft a rogue website containing an embedded 'CCCC' object with an empty 'src' tag in it and would need to lure a victim to vis...

Opera Web Browser 7.23 - Empty Embedded Object JavaScript Denial of Service

Opera Web Browser 7.23 - Empty Embedded Object JavaScript Denial of Service source: https://www.securityfocus.com/bid/11090/info Opera is a web browser available for a number of platforms, including Microsoft Windows, Linux and Unix variants and Apple MacOS. Opera Web Browser is reported to be...

Opera Web Browser 7.23 - Empty Embedded Object JavaScript Denial of Service

source: https://www.securityfocus.com/bid/11090/info Opera is a web browser available for a number of platforms, including Microsoft Windows, Linux and Unix variants and Apple MacOS. Opera Web Browser is reported to be susceptible to a JavaScript denial of service vulnerability. This vulnerabilit...

GLSA-200407-15 : Opera: Multiple spoofing vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200407-15 Opera: Multiple spoofing vulnerabilities Opera fails to remove illegal characters from an URI of a link and to check that the target frame of a link belongs to the same website as the link. Opera also updates the address...

GLSA-200408-05 : Opera: Multiple new vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200408-05 Opera: Multiple new vulnerabilities Multiple vulnerabilities have been found in the Opera web browser. Opera fails to deny write access to the 'location' browser object. An attacker can overwrite methods in this object a...

GLSA-200405-19 : Opera telnet URI handler file creation/truncation vulnerability

The remote host is affected by the vulnerability described in GLSA-200405-19 Opera telnet URI handler file creation/truncation vulnerability The telnet URI handler in Opera does not check for leading '-' characters in the host name. Consequently, a maliciously-crafted telnet:// link may be able t...

Opera < 7.54 Download File Type Dialog Spoofing

The version of Opera on the remote host contains a flaw that allows an attacker to determine the existence of files and directories on the remote host. To exploit this flaw, an attacker would need to set up a rogue website and lure a user of the remote host into visiting it with Opera. C Tenable...