Opera 7.22 File Creation and Execution Exploit (Malicious Webserver)

No description provided by source. !/usr/bin/perl Sample code of "Opera 7 Arbitrary File Auto-Saved Vulnerability." This Exploit will run a webserver that will create and execute a batch file on the victim's computer when visiting this malicious server This perl script is a small HTTP server for ...

Opera 7.22 - File Creation and Execution (WebServer)

Opera 7.22 - File Creation and Execution WebServer !/usr/bin/perl Sample code of "Opera 7 Arbitrary File Auto-Saved Vulnerability." This Exploit will run a webserver that will create and execute a batch file on the victim's computer when visiting this malicious server This perl script is a small...

CVE-2003-0870

Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name...

Opera 7.x - Directory Traversal

Opera 7.x - Directory Traversal source: https://www.securityfocus.com/bid/9279/info Opera is prone to a file corruption vulnerability. This issue is exposed when a user is presented with a file dialog, which will cause the creation of a temporary file. It is possible to specify a relative path to...

Opera 7.x - Directory Traversal

source: https://www.securityfocus.com/bid/9279/info Opera is prone to a file corruption vulnerability. This issue is exposed when a user is presented with a file dialog, which will cause the creation of a temporary file. It is possible to specify a relative path to another file on the system usin...

Opera Directory Traversal in Internal URI Protocol (Advisory)

Opera Web Browser Directory Traversal in Internal URI Protocol ============================================================== I ABSTRACT: Opera Web Browser defines an internal URI Protocol like command called "opera:". Among other things, it is used to display documentation and help files for the...

Opera Skinned & Opera Directory Traversal (Additional Details & a Simple Exploit)

Opera Skinned & Opera Directory Traversal Additional Details & a Simple Exploit: ================================================================================== ADDITIONAL DETAILS: While installing Opera, if the "USE SEPARATE SETTINGS FOR EACH USER" option is selected, the "opera7/profile"...

Opera Web Browser 7.x - URI Handler Directory Traversal

Opera Web Browser 7.x - URI Handler Directory Traversal source: https://www.securityfocus.com/bid/9021/info It has been reported that Opera is vulnerable to a directory traversal issue that may allow an attacker to access sensitive information. The problem presents itself due to insufficient...

Opera < 7.22 Multiple Vulnerabilities

The remote host is using Opera, an alternative web browser. The version of Opera installed on the remote host is affected by several issues. One may allow an attacker to drop arbitrary files with arbitrary names on this host; another may allow an attacker to traverse directories on the affected...

Opera Web Browser 7.x - URI Handler Directory Traversal

source: https://www.securityfocus.com/bid/9021/info It has been reported that Opera is vulnerable to a directory traversal issue that may allow an attacker to access sensitive information. The problem presents itself due to insufficient sanitization of user-supplied data through the 'Opera:' URI...

Internet Explorer and Opera local zone restriction bypass

Internet Explorer and Opera local zone restriction bypass. =--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--= ---------------------- Vendor Information: ---------------------- Homepage : http://www.microsoft.com Vendor : informed Mailed advisory: 23/10/03 Vender Response : None yet...

Opera Web Browser 7 - IFRAME Zone Restriction Bypass

Opera Web Browser 7 - IFRAME Zone Restriction Bypass source: https://www.securityfocus.com/bid/8887/info A flaw in the Opera web browsers security model has been discovered that could allow an attacker to access a users filesystem within the Local Zone. The problem occurs when handling malformed...

Opera Web Browser 7 - IFRAME Zone Restriction Bypass

source: https://www.securityfocus.com/bid/8887/info A flaw in the Opera web browsers security model has been discovered that could allow an attacker to access a users filesystem within the Local Zone. The problem occurs when handling malformed HTML iframes which point to local system locations...

Opera HREF escaped server name overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Opera HREF escaped server name overflow Release Date: 10/20/2003 Application: Opera 7.11, 7.20 Platform: Windows XP/2000 and GNU/Linux 2.4 tested, others may be vulnerable Severity: Remote...

CVE-2003-0870

CVE-2003-0870 affects Opera 7.11 and 7.20 where rendering certain HREFs causes a heap-based buffer overflow, allowing remote code execution via an escaped server name. Exploitation would require a user opening a crafted page or email containing the malformed HREF, potentially compromising the hos...

CVE-2003-0870

Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name...

Opera 7.117.20 HREF - Malformed Server Name Heap Corruption

Opera 7.117.20 HREF - Malformed Server Name Heap Corruption source: https://www.securityfocus.com/bid/8853/info A vulnerability has been discovered in the Opera web browser that could lead to remote code execution. The problem is said to trigger when handling malformed HTML HREF values and may...

Opera < 7.21 HREF Escaped Character Overflow

The installed version of Opera on the remote host is vulnerable to a buffer overflow in the code that parses HREF tags in the server. To exploit them, an attacker would need to set up a rogue website, then lure a user of this host to visit the site using Opera. The attacker would then be able to...

Opera 7.11/7.20 HREF - Malformed Server Name Heap Corruption

source: https://www.securityfocus.com/bid/8853/info A vulnerability has been discovered in the Opera web browser that could lead to remote code execution. The problem is said to trigger when handling malformed HTML HREF values and may result in a buffer overrun occuring within heap memory. As a...

Opera 7.20 - Mail Client Policy Circumvention

Opera 7.20 - Mail Client Policy Circumvention source: https://www.securityfocus.com/bid/8254/info The Opera M2 Mail Client is vulnerable to a policy circumvention issue that could allow information to be disclosed to a remote attacker. It is possible for an attacker to bypass the option to suppre...