Opera Web Browser重复站点访问地址栏URI伪造漏洞

Bugtraq ID:56984 Opera Web Browser是一款开源的WEB浏览器。 通过连续快速重复请求加载目标站点，可导致Opera不正确显示地址栏，攻击者可以构建恶意WEB页，诱使用户解析，欺骗目标用户，进行钓鱼等攻击。 0 Opera Web Browser 12.12之前版本 厂商解决方案 Opera Web Browser 12.12已经修复此漏洞，建议用户下载使用： http://www.opera.com...

Opera Mini / Opera Mobile for Android vulnerable in the WebView class

Overview Opera Mini and Opera Mobile for Android contain a vulnerability in the WebView class. Opera Mini and Opera Mobile are web browsers for mobile devices. Opera Mini and Opera Mobile for Android contain a vulnerability in the WebView class. Gaku Mochizuki of Mitsui Bussan Secure Directions,...

Carefully timed redirects can allow cross site scripting

Scripts on a page are supposed to be restricted so that they can only interact with other pages from the same domain and security context. Carefully timed redirects can cause scripts to execute in the wrong security context in Opera. This allows cross site scripting XSS...

JVN#27691264: Opera Mini / Opera Mobile for Android vulnerable in the WebView class

Opera Mini and Opera Mobile are web browsers for mobile devices. Opera Mini and Opera Mobile for Android contain a vulnerability in the WebView class. Impact If a user of the affected product uses another malicious Android application, information managed by the product may be disclosed. Solution...

Carefully timed redirects can allow cross site scripting – Opera Security Advisories

Scripts on a page are supposed to be restricted so that they can only interact with other pages from the same domain and security context. Carefully timed redirects can cause scripts to execute in the wrong security context in Opera. This allows cross site scripting XSS...

FreeBSD : opera -- execution of arbitrary code (85f33a8d-492f-11e2-aa75-003067c2616f)

Opera reports : When loading GIF images into memory, Opera should allocate the correct amount of memory to store that image. Specially crafted image files can cause Opera to allocate the wrong amount of memory. Subsequent data may then overwrite unrelated memory with attacker-controlled data. Thi...

Opera < 12.12 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 12.12 and is, therefore, reportedly affected by the following vulnerabilities : - An error exists related to GIF image file handling that can allow heap memory corruption and can lead to application crashes or arbitrary code...

opera -- execution of arbitrary code

Opera reports: When loading GIF images into memory, Opera should allocate the correct amount of memory to store that image. Specially crafted image files can cause Opera to allocate the wrong amount of memory. Subsequent data may then overwrite unrelated memory with attacker-controlled data. This...

Private data can be disclosed to other computer users, or be modified by them

Private data such as cache, password files, and Opera's configuration files are supposed to be visible only to the user who owns the Opera profile. Opera does not set the profile folder permissions correctly, allowing other computer users to read the sensitive contents of profile files. In some...

Repeated attempts to access a target site can trigger address field spoofing – Opera Security Advisories

The browser address field should always show the correct address for the page that is currently being displayed. By making repeated requests to load a target site in rapid succession, an attacking web site can cause Opera to display the target sites address while the attacking page is still being...

Private data can be disclosed to other computer users, or be modified by them – Opera Security Advisories

Private data such as cache, password files, and Opera’s configuration files are supposed to be visible only to the user who owns the Opera profile. Opera does not set the profile folder permissions correctly, allowing other computer users to read the sensitive contents of profile files. In some...

Malformed GIF images could allow execution of arbitrary code – Opera Security Advisories

When loading GIF images into memory, Opera should allocate the correct amount of memory to store that image. Specially crafted image files can cause Opera to allocate the wrong amount of memory. Subsequent data may then overwrite unrelated memory with attacker-controlled data. This can lead to a...

SuSE Update for opera openSUSE-SU-2012:0992-1 (opera)

Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse201209921.nasl 8265 2018-01-01 06:29:23Z teissa $ SuSE Update for opera openSUSE-SU-2012:0992-1 opera Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is...

SuSE Update for opera openSUSE-SU-2012:1481-1 (opera)

Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse201214811.nasl 8253 2017-12-28 06:29:51Z teissa $ SuSE Update for opera openSUSE-SU-2012:1481-1 opera Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is...

SuSE Update for update openSUSE-SU-2012:0865-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201208651.nasl 8245 2017-12-26 06:29:59Z teissa $ SuSE Update for update openSUSE-SU-2012:0865-1 update Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...

SuSE Update for opera openSUSE-SU-2012:0610-1 (opera)

Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse201206101.nasl 8265 2018-01-01 06:29:23Z teissa $ SuSE Update for opera openSUSE-SU-2012:0610-1 opera Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is...

openSUSE: Security Advisory for update (openSUSE-SU-2012:0865-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for opera (openSUSE-SU-2012:0992-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for opera (openSUSE-SU-2012:0610-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for opera (openSUSE-SU-2012:1481-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...