Opera < 12.01 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 12.01 and is, therefore, reportedly affected by multiple issues : - An error exists in the handling of certain URLs that can lead to memory corruption and possible code execution. 1016 - Errors exist in the handling of DOM elements...

Opera 12.01 Released With Fixes for Five Security Flaws

There are new versions of the Opera browser available, a small update to version 12.01, but they include a number of important security fixes, notably a patch for a vulnerability that could lead to remote code execution. The maintainers of Opera pushed out new versions for all of the major...

Small windows can be used in several ways to trick users into executing downloads

When the download dialog is displayed, it should always be visible to the user, to ensure that the user realizes it is there. If the dialog is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can end...

Certain URL constructs can allow arbitrary code execution

Certain page address URL constructs can cause Opera to allocate the wrong amount of memory for storing the address. When it then attempts to store the address, it will overwrite unrelated memory with attacker-controlled data. This can lead to a crash, which may also execute that data as code...

Element HTML content can be incorrectly returned without escaping, bypassing some HTML sanitizers

When sites accept HTML from untrusted users, and use that HTML as page content, they typically sanitize the untrusted HTML to ensure that it does not contain any harmful content, such as malicious scripts. In some cases, this sanitization may be performed by writing and reading the contents of DO...

Certain characters in HTML can incorrectly be ignored, which can facilitate XSS attacks

Sites that allow content to be provided by untrusted users, such as forums and blogging sites, typically sanitize the untrusted content to ensure that it does not contain any harmful content, such as malicious scripts. When certain characters appear at specific locations within HTML markup, they...

Small windows can be used in several ways to trick users into executing downloads – Opera Security Advisories

When the download dialog is displayed, it should always be visible to the user, to ensure that the user realizes it is there. If the dialog is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can end...

Certain characters in HTML can incorrectly be ignored, which can facilitate XSS attacks – Opera Security Advisories

Sites that allow content to be provided by untrusted users, such as forums and blogging sites, typically sanitize the untrusted content to ensure that it does not contain any harmful content, such as malicious scripts. When certain characters appear at specific locations within HTML markup, they...

Element HTML content can be incorrectly returned without escaping, bypassing some HTML sanitizers – Opera Security Advisories

When sites accept HTML from untrusted users, and use that HTML as page content, they typically sanitize the untrusted HTML to ensure that it does not contain any harmful content, such as malicious scripts. In some cases, this sanitization may be performed by writing and reading the contents of DO...

Certain URL constructs can allow arbitrary code execution – Opera Security Advisories

Certain page address URL constructs can cause Opera to allocate the wrong amount of memory for storing the address. When it then attempts to store the address, it will overwrite unrelated memory with attacker-controlled data. This can lead to a crash, which may also execute that data as code...

New OpFake Android Malware Entices Users With Opera Mini Browser

There is a new variant of the OpFake mobile malware making the rounds, and this version comes bundled with a version of the legitimate Opera Mini mobile browser. The malware targets Android phones and steals money from victims by sending SMS messages without the user’s knowledge to premium-rate...

update for opera (important)

update to 12.00 full changelog available at: http://www.opera.com/docs/changelogs/unix/1120/ - fixes bnc767045...

Opera Web Browser 11.65之前版本多个漏洞

BUGTRAQ ID: 54011 Opera为来自挪威的一个浏览器。 Opera Web Browser 11.65之前版本在实现上存在多个漏洞，攻击者可利用这些漏洞执行任意脚本代码，泄露敏感信息或欺骗可信站点的原始URL，进行网络钓鱼攻击。 0 Opera Software Opera Web Browser 9.x Opera Software Opera Web Browser 11.x Opera Software Opera Web Browser 10.x 厂商补丁： Opera Software --------------...

Opera Unspecified Vulnerability - June12 (Mac OS X)

The host is installed with Opera and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gboperaunspecifiedvulnmacosx.nasl 5977 2017-04-19 09:02:22Z teissa $ Opera Unspecified Vulnerability - June12 Mac OS X Authors: Sooraj KS Copyright: Copyright c 2012 Greenbone Networks GmbH...

Opera Unspecified Vulnerability (Jun 2012) - Mac OS X

Opera is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera URL Processing Arbitrary Code Execution Vulnerability (Linux)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperaurlcodeexecvulnlin.nasl 5999 2017-04-21 09:02:32Z teissa $ Opera URL Processing Arbitrary Code Execution Vulnerability Linux Authors: Sooraj KS Copyright: Copyright c 2012 Greenbo...

Opera Multiple Vulnerabilities - June12 (Linux)

The host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnjune12lin.nasl 5931 2017-04-11 09:02:04Z teissa $ Opera Multiple Vulnerabilities - June12 Linux Authors: Sooraj KS Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Opera Multiple Denial of Service Vulnerabilities - June12 (Windows)

The host is installed with Opera and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultdosvulnjune12win.nasl 5931 2017-04-11 09:02:04Z teissa $ Opera Multiple Denial of Service Vulnerabilities - June12 Windows Authors: Sooraj KS Copyright: Copyrigh...

Opera URL Processing Arbitrary Code Execution Vulnerability (Windows)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperaurlcodeexecvulnwin.nasl 5912 2017-04-10 09:01:51Z teissa $ Opera URL Processing Arbitrary Code Execution Vulnerability Windows Authors: Sooraj KS Copyright: Copyright c 2012...

Opera URL Processing Arbitrary Code Execution Vulnerability (Mac OS X)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperaurlcodeexecvulnmacosx.nasl 5888 2017-04-07 09:01:53Z teissa $ Opera URL Processing Arbitrary Code Execution Vulnerability Mac OS X Authors: Sooraj KS Copyright: Copyright c 2012...