CVE-2011-2640

Opera before 11.10 allows remote attackers to cause a denial of service application crash via an HTML document that has an empty parameter value for an embedded Java applet...

CVE-2011-2641

CVE-2011-2641 affects Opera 11.11, where remote attackers can crash the app by manipulating the FONT element’s FACE attribute inside an IFRAME after setting the IFRAME SRC to about:blank. This vulnerability enables a Denial of Service and is documented with an exploit reference (exploit-db). Publ...

Opera < 11.50 Multiple Vulnerabilities

The version of Opera installed on the remote Windows host is earlier than 11.50 and thus potentially affected by multiple vulnerabilities: - An error exists in the handling of data URIs that allows cross-site scripting in some unspecified cases. Issue 995 - An error exists in the browser's handli...

Opera Web Browser URL处理拒绝服务漏洞

Bugtraq ID: 48501 Opera是一款流行的WEB浏览器。 当尝试处理一个不能解析为合法URL的URL时，当装载时Opera会创建一个错误页显示给用户。如果创建了足够的非法URL，Opera会创建这些错误页面消耗所有磁盘控件，导致浏览器或系统崩溃。 Opera Software Opera Web Browser 11.11 Opera Software Opera Web Browser 11.01 Opera Software Opera Web Browser 11.00 Opera Software Opera Web Browser 10.63 Opera...

Opera Web Browser未明跨站脚本漏洞

Bugtraq ID: 48500 Opera是一款流行的WEB浏览器。 当处理"data" URL机制时存在错误，没有针对URI做强制的安全上下文继承，允许URI与其他页和源代码页面交互。可造成跨站脚本攻击。 Opera Software Opera Web Browser 11.11 Opera Software Opera Web Browser 11.01 Opera Software Opera Web Browser 11.00 Opera Software Opera Web Browser 10.63 Opera Software Opera Web Browser...

Opera < 11.50 Multiple Vulnerabilities

Binary data 5971.prm...

Issue with error pages can cause a system crash

When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...

Issue with error pages can cause a system crash – Opera Security Advisories

When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...

Opera < 11.50 Multiple Vulnerabilities

Binary data 800843.prm...

Data URIs may be used to initiate cross site scripting against unrelated sites

Data URIs are supposed to inherit the security context from the page that created them. In some cases, Opera does not enforce this correctly, and will allow unrelated data URIs to interact both with each other, and their source pages. This can be used to enable cross site scripting against the...

Data URIs may be used to initiate cross site scripting against unrelated sites – Opera Security Advisories

Data URIs are supposed to inherit the security context from the page that created them. In some cases, Opera does not enforce this correctly, and will allow unrelated data URIs to interact both with each other, and their source pages. This can be used to enable cross site scripting against the...

opera (important)

opera 11.11 fixes a security vulnerability. Citing http://www.opera.com/support/kb/view/992/: Framesets allow web pages to hold other pages inside them. Certain frameset constructs are not handled correctly when the page is unloaded, causing a memory corruption. To inject code, additional...

Opera Web Browser 11.11拒绝服务漏洞

Bugtraq ID: 48262 Opera Web Browser是一款开源的WEB服务器。 Opera Web Browser不正确处理特制HTML元素，远程攻击者构建恶意WEB页，诱使用户解析，可导致应用程序崩溃。 Opera Web Browser 11.11 厂商解决方案 目前没有详细解决方案提供： http://www.opera.com/ html body iframe src=about:blank id=bo0om style="width:0px;height:0px;border:0px none;"/iframe script...

Opera Web Browser 11.11 - Denial of Service

Opera Web Browser 11.11 - Denial of Service source: https://www.securityfocus.com/bid/48262/info The Opera Web Browser is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Opera Web Browser 11.11 ...

Opera Web Browser 11.11 - Denial of Service

source: https://www.securityfocus.com/bid/48262/info The Opera Web Browser is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Opera Web Browser 11.11 is vulnerable; other versions may also be...

Opera Web Browser 11.11 Remote Crash

Exploit for windows platform in category dos / poc / Opera 11.11 Remote Crash Software link: http://www.opera.com/download/ Tested on: Win32 xp home sp 3 CVE : null Im too lazy to deep analyze this ,but i thing is just unexploitable crash so fjixvt dla klechis³awa i jego kosiarki :i / var a =...

Opera Web Browser 11.11 - Remote Crash

Opera Web Browser 11.11 - Remote Crash / Opera 11.11 Remote Crash Software link: http://www.opera.com/download/ Tested on: Win32 xp home sp 3 CVE : null Im too lazy to deep analyze this ,but i thing is just unexploitable crash so fjixvt dla klechis³awa i jego kosiarki :i / var a =...

Opera Web Browser 11.11 - Remote Crash

/ Opera 11.11 Remote Crash Software link: http://www.opera.com/download/ Tested on: Win32 xp home sp 3 CVE : null Im too lazy to deep analyze this ,but i thing is just unexploitable crash so fjixvt dla klechis³awa i jego kosiarki :i / var a = window.document.getElementById'bo0om'; var b =...

FreeBSD : Opera -- code injection vulnerability through broken frameset handling (e666498a-852a-11e0-8f78-080027ef73ec)

Opera Software ASA reports : Fixed an issue with framesets that could allow execution of arbitrary code, as reported by an anonymous contributor working with the SecuriTeam Secure Disclosure program. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Opera Browser 'SELECT' HTML Tag Remote Memory Corruption Vulnerability - Windows

Opera browser is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...