Opera Web Browser 7.0 - Remote IFRAME Denial of Service

Opera Web Browser 7.0 - Remote IFRAME Denial of Service source: https://www.securityfocus.com/bid/10081/info A denial of service vulnerability has been reported to affect Opera Web Browser. The issue is reported to present itself when Opera attempts to render IFRAME HTML tags that contain an...

Opera Web Browser 7.0 - Remote IFRAME Denial of Service

source: https://www.securityfocus.com/bid/10081/info A denial of service vulnerability has been reported to affect Opera Web Browser. The issue is reported to present itself when Opera attempts to render IFRAME HTML tags that contain an invalid source argument. A remote attacker may exploit this...

CVE-2003-0593

CVE-2003-0593 describes a vulnerability in Opera where remote attackers can bypass cookie access restrictions by using encoded directory traversal sequences (%2e%2e) in a URL. This leads Opera to send cookies outside the intended URL subset to a potentially co-located application on the same serv...

CVE-2003-0593

Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" encoded dot dot directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same...

opera723.txt

Opera Array Allocation Managment Exploit ===================================== Dicovered by- d3thStaR !AM Greets: !AM Crew, Atomix, d3thstar, mgrd, 0x29A Crew, rootthief.com. Sources: Safari Overflow Exploit- kang Confirmed products effected- Opera 7.23 Linux, Opera 7.23 Windows =======Descriptio...

CVE-2004-2083

Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."...

CVE-2003-1561

Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data...

CVE-2003-1420

Cross-site scripting XSS vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbitrary web script or HTML via the HTTP Location header...

CVE-2003-1387

Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username...

CVE-2003-1388

Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension...

CVE-2003-1396

Heap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a filename with a long extension...

CVE-2003-1397

The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service crash via an HTTP request containing a long string that gets passed to the ShowDocument method...

[Opera 7] Arbitrary File Delete Vulnerability

---------------------------------------------------------------------- TITLE : Opera 7 Arbitrary File Delete Vulnerability -= How Dare You Delete My Important Files? =- PRODUCT : Opera 7 for Windows VERSIONS : 7.22 build 3221 JP:build 3222 7.21 build 3218 JP:build 3219 7.20 build 3144 JP:build 31...

Opera Browser 6.0 6 - URI Display Obfuscation

Opera Browser 6.0 6 - URI Display Obfuscation source: https://www.securityfocus.com/bid/9281/info A weakness has been reported in Opera that may allow attackers to obfuscate the URI for a visited page. The problem is said to occur when a URI that is designed to access a specific location with a...

Opera Browser 6.0 6 - URI Display Obfuscation

source: https://www.securityfocus.com/bid/9281/info A weakness has been reported in Opera that may allow attackers to obfuscate the URI for a visited page. The problem is said to occur when a URI that is designed to access a specific location with a supplied username, contains a specially crafted...

[Opera 7] Arbitrary File Delete Vulnerability

---------------------------------------------------------------------- TITLE : Opera 7 Arbitrary File Delete Vulnerability -= How Dare You Delete My Important Files? =- PRODUCT : Opera 7 for Windows VERSIONS : 7.22 build 3221 JP:build 3222 7.21 build 3218 JP:build 3219 7.20 build 3144 JP:build 31...

[Opera 7] Arbitrary File Auto-Saved Vulnerability.

--------------------------------------------------------------------------------- TITLE : Opera 7 Arbitrary File Auto-Saved Vulnerability. -= For Whom The Remote Customizing Runs? =- PRODUCT : Opera 7 for Windows VERSIONS : 7.22 build 3221 JP:build 3222 7.21 build 3218 JP:build 3219 7.20 build 31...

Opera 7.22 File Creation and Execution Exploit (Malicious Webserver)

Exploit for unknown platform in category remote exploits ==================================================================== Opera 7.22 File Creation and Execution Exploit Malicious Webserver ==================================================================== !/usr/bin/perl Sample code of "Oper...

Opera 7.22 - File Creation and Execution (WebServer)

!/usr/bin/perl Sample code of "Opera 7 Arbitrary File Auto-Saved Vulnerability." This Exploit will run a webserver that will create and execute a batch file on the victim's computer when visiting this malicious server This perl script is a small HTTP server for a check ofthe vulnerability. BTW, y...

[Full-Disclosure] Opera directory traversal and buffer overflow

OVERVIEW ======== Two vulnerabilities were found in the Opera web browser versions up to 7.22. They are related to skin files. The first one is a directory traversal problem which allows an attacker to upload a file to an arbitrary location on the victim system. The second is a buffer overflow in...