openSUSE Security Update : opera (openSUSE-SU-2010:0728-1)

Opera 10.63 fixes some security issues as described in their changelog: http://www.opera.com/docs/changelogs/unix/1063/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-3324. The text...

Opera 10.63 - SVG Animation Element Denial of Service

Opera 10.63 - SVG Animation Element Denial of Service Exploit Title: Opera Denial of Service by SVG Element Date: 16, October 2010 Author: fla Software Link: http://www.opera.com/ Version: 10.63 and previous Tested on: Ubuntu 10.10 x64, Windows 7 x64...

Opera 10.63 SVG Animation Denial Of Service

Exploit Title: Opera Denial of Service by SVG Element Date: 16, October 2010 Author: fla Software Link: http://www.opera.com/ Version: 10.63 and previous Tested on: Ubuntu 10.10 x64, Windows 7 x64...

Opera 10.63 - SVG Animation Element Denial of Service

Exploit Title: Opera Denial of Service by SVG Element Date: 16, October 2010 Author: fla Software Link: http://www.opera.com/ Version: 10.63 and previous Tested on: Ubuntu 10.10 x64, Windows 7 x64...

Opera Denial of Service Vulnerability

Opera是一款流行的WEB浏览器，支持多种平台。 Opera 10.63 Denial of Service Vulnerability 10.63 厂商补丁： Opera Software -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.opera.com/browser/download/ http://pouya.info/blog/userfiles/vul/Opera-DoS.rar...

Opera < 10.63 Multiple Vulnerabilities

Binary data 800852.prm...

Opera < 10.63 Multiple Vulnerabilities

Binary data 5678.prm...

Opera < 10.63 Multiple Vulnerabilities

The version of Opera installed on the remote host is prior to 10.63. It is, therefore, affected by the multiple vulnerabilities : - It is possible to bypass cross-domain checks and allow partial data theft by using CSS. 971 - It is possible to spoof the page address by modifying the size of the...

opera -- multiple vulnerabilities

The Opera Desktop Team reports: Fixed an issue that allowed cross-domain checks to be bypassed, allowing limited data theft using CSS, as reported by Isaac Dawson. Fixed an issue where manipulating the window could be used to spoof the page address. Fixed an issue with reloads and redirects that...

JavaScript might run in the wrong context if loaded from error page

If Opera is sent to an invalid URL, an error page will be displayed along with a link to the URL. The URL linked to might run scripts, and in some cases these scripts might be run in the wrong security context. This can be used to execute scripts in the context of an unrelated domain, which allow...

JavaScript might run in the wrong context if loaded from error page – Opera Security Advisories

JavaScript might run in the wrong context if loaded from error page – Opera Security Advisories OPCOM Team | October 11, 2010 Severity Moderate Description If Opera is sent to an invalid URL, an error page will be displayed along with a link to the URL. The URL linked to might run scripts, and in...

Private video streams can be intercepted

Video content may be used as filler content for a HTML5 canvas, if the video format is natively supported by Opera. If the video and page are from the same site, the content of the canvas can be safely read out by scripts. In some cases, Opera does not check the video's origin correctly, and may...

Cross-domain checks may be bypassed, allowing limited data theft using CSS

CSS can be loaded cross-domain. In some cases, files that do not contain CSS may be partially interpreted as CSS. It is possible to make Opera incorrectly treat remote CSS files as if they were CSS files from the document-origin server, allowing the interpreted parts of a remote file to be read b...

Manipulating the window can be used to spoof the page address – Opera Security Advisories

Manipulating the window can be used to spoof the page address – Opera Security Advisories OPCOM Team | October 6, 2010 Severity Low Description Web page scripts can be used to alter the size of the browser window. In some cases, this manipulation can cause the wrong part of the Web page address t...

Reloads and redirects can allow spoofing and cross site scripting – Opera Security Advisories

Reloads and redirects can allow spoofing and cross site scripting – Opera Security Advisories OPCOM Team | October 6, 2010 Severity Critical Description Scripts on a page are supposed to be restricted so that they can only interact with other pages from the same domain and security context...

Cross-domain checks may be bypassed, allowing limited data theft using CSS – Opera Security Advisories

Cross-domain checks may be bypassed, allowing limited data theft using CSS – Opera Security Advisories OPCOM Team | October 6, 2010 Severity Moderate Description CSS can be loaded cross-domain. In some cases, files that do not contain CSS may be partially interpreted as CSS. It is possible to mak...

Private video streams can be intercepted – Opera Security Advisories

Private video streams can be intercepted – Opera Security Advisories OPCOM Team | October 6, 2010 Severity Moderate Description Video content may be used as filler content for a HTML5 canvas, if the video format is natively supported by Opera. If the video and page are from the same site, the...

Details Emerge on IE 8 Data-Stealing Bug

Security researcher Chris Evans has released details of the data-stealing bug in Internet Explorer 8 that he publicized earlier this month, saying that the CSS flaw can be used to force victims to post messages on Twitter and that the bug appears to be no closer to being fixed. The bug, which has...

Opera 10.51 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ================================= Opera 10.51 DLL Hijacking Exploit ================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

My Opera Found To Host Malware

HED: MyOpera found to host malware BAK: The My Opera free Web hosting service is hosting malicious code, just the latest prominent hosting service to be gamed by malware distributors. Less than a month after Google’s Code hosting service was found to be hosting and serving malicious executables, ...