Opera 10.50 - integer Overflow

?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ------------------------------------------------------------------------------- Opera 10.10 - 10.50 Title: Integer overflow leading to out of bounds array access R/W 0day poc Autor: Marcin Ressel aka echo Date:...

Opera 10.10 remote denial of service vulnerability-vulnerability warning-the black bar safety net

http://www.exploit-db.com/exploits/11332 1. html 2. script 3. var buf = 'A'; 4. while buf. length = 4 4 4 4 4 4 4 buf+=buf; 5. alertbuf 6. /script 7. /html Test results: !...

Opera 10.01 Remote Array Overrun

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Opera 10.01 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 20.11.2009 CVE: CVE-2009-0689 Risk: High Remote: Yes Affected Software: - - Opera 10.01 -...

Heap buffer overflow in string to number conversion – Opera Security Advisories

Passing very long strings through the string to number conversion using JavaScript in Opera may result in heap buffer overflows. This also affects the dtoa routine, and was reported in CVE-2009-0689. In most cases Opera will just freeze or terminate, but in some cases this could lead to a crash...

CVE-2009-3831

Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted domain name...

CVE-2009-3013

Opera 9.52 and earlier, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in Location headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Location header that contains JavaScript sequences in a...

Opera Web Browser 'Refresh' Header XSS Vulnerabilities (Windows)

The host is installed with Opera Web Browser and is prone to Cross-Site Scripting Vulnerability. OpenVAS Vulnerability Test $Id: gboperaxssvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera Web Browser 'Refresh' Header XSS Vulnerabilities Windows Authors: Antu Sanadi Copyright: Copyright c 200...

Image properties can be used to execute scripts – Opera Security Advisories

Image properties can be used to execute scripts – Opera Security Advisories OPCOM Team | December 16, 2008 Severity Highly Severe Problem Description Image properties can contain custom comments. When displaying the image properties, Opera can be tricked into treating the comments as script. This...

Opera security upgrade for Linux, Solaris and FreeBSD – Opera Security Advisories

Opera security upgrade for Linux, Solaris and FreeBSD – Opera Security Advisories OPCOM Team | December 16, 2008 Summary Opera 9.20 has a highly recommended security upgrade for users of the Adobe Flash Player on Linux, Solaris and FreeBSD Severity Highly critical Problem description A security...

Feed preview can reveal contents of unrelated news feeds – Opera Security Advisories

Feed preview can reveal contents of unrelated news feeds – Opera Security Advisories OPCOM Team | December 16, 2008 Severity Highly Severe Platforms All desktop versions Problem Description When Opera is previewing a news feed, some scripts are not correctly blocked. These scripts are able to...

HTML parsing flaw can cause Opera to execute arbitrary code – Opera Security Advisories

HTML parsing flaw can cause Opera to execute arbitrary code – Opera Security Advisories OPCOM Team | December 15, 2008 Severity Extremely Severe Problem Description Certain HTML constructs can cause the resulting DOM to change unexpectedly, which triggers a crash. To inject code, additional...

Opera 9.62 file:// Local Heap Overflow Exploit

Exploit for unknown platform in category local exploits ============================================== Opera 9.62 file:// Local Heap Overflow Exploit ============================================== uh? // ksOSe 11/15/2008 // tested on Windows XP SP3, opera 9.62 international version // vulnerabili...

Opera Web浏览器历史搜索及链接面板跨站脚本漏洞

BUGTRAQ ID: 31991 CVECAN ID: CVE-2008-4795,CVE-2008-4794 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的历史搜索没有正确地过滤某些用户提供参数，远程攻击者可以向历史搜索结构页面中注入恶意脚本，然后以提升的权限执行这些脚本并与Opera的配置交互。 链接面板可显示当前页面所有帧中的链接，包括JavaScript URL链接。当页面位于帧中的时候，就会在最外面的页面而不是URL所在的页面执行脚本。这可能导致以不相关帧的环境执行脚本。 Opera Software Opera 9.62 Opera Software...

CVE-2008-4794

Opera before 9.62 allows remote attackers to execute arbitrary commands via the History Search results page, a different vulnerability than CVE-2008-4696...

Opera 9.61 opera:historysearch Code Execution Exploit PoC

Exploit for unknown platform in category remote exploits ========================================================= Opera 9.61 opera:historysearch Code Execution Exploit PoC ========================================================= function x window.open'opera:historysearch?q=%2A"&p=1&s=1';...

Opera Stored Cross Site Scripting Vulnerability

====================================================== ================= = Opera Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.opera.com = = Affected Version: = -- All desktop versions = = Public disclosure on 22nd October 2008 =...

CVE-2008-4697

The Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a javascript: URL in the context of the outermost page instead of the page that contains this URL, which allows remote attackers to conduct cross-site scripting XSS attacks...

opera-storedxss.txt

======================================================================= = Opera Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.opera.com = = Affected Version: = -- All desktop versions = = Public disclosure on 22nd October 2008 =...

Opera 9.60 - Persistent Cross-Site Scripting

Opera 9.60 - Persistent Cross-Site Scripting ======================================================================= = Opera Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.opera.com = = Affected Version: = -- All desktop versions = = Public disclosure on 22nd October...

Opera <= 9.60 Stored Cross Site Scripting Vulnerability

Exploit for unknown platform in category remote exploits ======================================================= Opera = 9.60 Stored Cross Site Scripting Vulnerability ======================================================= ======================================================================= =...