Feed links can link to local files – Opera Security Advisories

Feed links can link to local files – Opera Security Advisories OPCOM Team | December 16, 2008 Severity Less Severe Problem Description As a security precaution, Opera does not allow Web pages to link to files on the user’s local disk. However, a flaw exists that allows Web pages to link to feed...

Opera Web浏览器HTML注入及跨站脚本漏洞

BUGTRAQ ID: 31842 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的9.61之前版本中的多个安全漏洞可能允许恶意用户执行脚本注入攻击、绕过某些安全限制或泄露敏感信息。 1 History Search功能没有正确地过滤某些输入，用户在查看恶意数据时可能在用户的浏览器会话中注入任意HTML和脚本代码，导致泄露之前所访问的页面。 2 实现Fast Forward功能中的错误可能允许通过特制的JavaScript URL在受限制的帧中执行任意脚本代码。 3 在预览新闻源期间时阻断脚本存在错误，可能导致泄露所订阅新闻源的内容，或将用户订阅到任意的新闻源。 Oper...

Opera Web Browser URI重定向远程代码执行漏洞

BUGTRAQ ID: 31631 CNCAN ID：CNCAN-2008100914 Opera是一款开放源代码的WEB浏览器。 Opera存在设计问题，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 如果恶意页面重定向Opera到一个特殊构建的URL地址，可导致Opera崩溃，给定足够的地址内容，可能导致任意代码执行。 Opera Software Opera Web Browser 8.51 Opera Software Opera Web Browser 8.50 Opera Software Opera Web Browser 8.0.2 Opera Software...

opera -- multiple vulnerabilities

Opera Software reports of multiple security issues in Opera. All of them can lead to arbitrary code execution. Details are as the following: Newsfeed prompt can cause Opera to execute arbitrary code Resized canvas patterns can cause Opera to execute arbitrary code...

FreeBSD : opera -- multiple vulnerabilities (31b045e7-ae75-11dc-a5f9-001a4d49522b)

Opera Software ASA reports about multiple security fixes : - Fixed an issue where plug-ins could be used to allow cross domain scripting, as reported by David Bloom. Details will be disclosed at a later date. - Fixed an issue with TLS certificates that could be used to execute arbitrary code, as...

多个Web浏览器SSL证书SubjectAltName验证漏洞

多个WEB浏览器在处理SSL证书验证方面存在缺陷。问题是由于不正确处理针对X.509证书的subjectAltName扩展。 成功利用此漏洞当非法证书使用在SSL HTTP连接时，可绕过安全警告进行钓鱼攻击。 下面的WEB浏览器受此漏洞影响： - Mozilla Firefox, 和Gecko渲染引擎的WEB浏览器。 Opera - Konqueror, 和基于KHTML渲染引擎的浏览器如Apple's Safari. Opera Software Opera Web Browser 9.24 Opera Software Opera Web Browser 9.23 Mozilla...

Opera Web浏览器Torrent文件处理远程溢出漏洞

Opera是一款流行的WEB浏览器，支持多种平台。 Opera在处理畸形格式的Torrent文件时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 如果用户在Opera中的传输管理器右击了恶意的torrent项的话，就可能触发缓冲区溢出，导致执行任意指令。仅仅点击torrent链接不会触发这个漏洞。 Opera Software Opera Web Browser 9.21 http://secunia.com/advisories/25278/ http://www.opera.com/support/search/view/860/...

Opera Web浏览器createSVGTransformFromMatrix对象代码执行漏洞

Opera是一款流行的WEB浏览器，支持多种平台。 Opera在实现Javascript SVG过程中存在安全漏洞，远程攻击者可能利用此漏洞控制用户机器。 在处理createSVGTransformFromMatrix请求时Opera没有正确验证传送给函数的对象类型，如果向该函数传送了不正确对象的话就能导致在试图进行虚拟函数调用时使用用户控制的指针，在用户机器上执行任意代码。 Opera Software Opera 9.02 临时解决方法： 在浏览器中禁用JavaScript。 厂商补丁： Opera Software --------------...

FreeBSD : opera -- URL parsing heap overflow vulnerability (4867ae85-608d-11db-8faf-000c6ec775d9)

iDefense Labs reports : Remote exploitation of a heap overflow vulnerability within version 9 of Opera Software's Opera Web browser could allow an attacker to execute arbitrary code on the affected host. A flaw exists within Opera when parsing a tag that contains a URL. A heap buffer with a...

opera -- URL parsing heap overflow vulnerability

iDefense Labs reports: Remote exploitation of a heap overflow vulnerability within version 9 of Opera Software's Opera Web browser could allow an attacker to execute arbitrary code on the affected host. A flaw exists within Opera when parsing a tag that contains a URL. A heap buffer with a consta...

Opera integer overflow

Integer overflow leads to buffer overflow on space allocation for JPEG image...

XMLHttpRequest Object security bypass in Opera Web Browser

Overview The Opera Web Browser fails to properly enforce security restrictions on the XMLHttpRequest Object. This may allow a remote, unauthenticated attacker to insert content from potentially malicious web sites. Description The XMLHttpRequest Object is a scripting object that provides routines...

[Opera 7] Arbitrary File Delete Vulnerability

---------------------------------------------------------------------- TITLE : Opera 7 Arbitrary File Delete Vulnerability -= How Dare You Delete My Important Files? =- PRODUCT : Opera 7 for Windows VERSIONS : 7.22 build 3221 JP:build 3222 7.21 build 3218 JP:build 3219 7.20 build 3144 JP:build 31...

[Opera 7] Five DoS codes on general web sites

--------------------------------------------------------------------------------- TITLE :Opera 7 Five DoS codes on general web sites -= Fastest browser on earth, Fastest crash on earth too =- PRODUCT : Opera for Windows VERSIONS : 7.11b build 2887 7.11 build 2880 7.10 build 2840 7.03 build 2670...

Opera long filename buffer overflow

Buffer overflow if used in filename...

[Opera 7/6] Long Filename Buffer Overflow Vulnerability in Download

Hi, all. We release the information about the vulnerability of Opera, here. And we hope that this vulnerability be fixed by Vendor immediately. ----------------------------------------------------------------- Synopsis: Opera 7/6 Long Filename Buffer Overflow Vulnerability in Download Product:...

Opera Username Buffer Overflow Vulnerability

Hello all. We release the information about the vulnerability of Opera, here. And we wish that this vulnerability is fixed by Vendor, immediately. -------------------------------------------------------------- Synopsis: Opera Username Buffer Overflow Vulnerability Product: Opera for Windows...