Opera: Multiple vulnerabilities

Background Opera is a fast web browser that is available free of charge. Description Michal Zalewski reported two vulnerabilities, memory corruption when adding news feed sources from a website CVE-2008-1761 as well as when processing HTML CANVAS elements to use scaled images CVE-2008-1762...

Memory corruption

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...

CVE-2008-1762

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...

CVE-2008-1762

Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...

Opera Web浏览器9.27版本修复多个内存破坏漏洞

BUGTRAQ ID: 28585 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的实现上存在多个安全漏洞，远程攻击者可能利用这些漏洞控制用户系统。 当Opera遇到网页上的newsfeed源时，就会提示用户添加该源为newsfeed。恶意脚本可以控制feed源，导致Opera由于错误的内存访问而出现崩溃或执行任意指令。 HTML CANVAS单元可使用度量图形作为图样。如果精心控制了图形的度量的话，脚本就会导致Opera由于内存破坏而出现崩溃或执行任意代码。 Opera Software Opera = 9.26 Opera Software -------------...

CVE-2007-6524

Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap BMP file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420...