Researchers Find Malware on My Opera Page

Researchers have discovered that a page on the My Opera community Web site is hosting malware related to an IRC botnet. The discovery comes just a couple of weeks after malicious code also was found on Google Code servers. On Thursday, a researcher perusing a page on the My Opera community site...

Opera Web Browser v10.62 (CSS) Cross Domain Vulnerability

Proof Of Concept: 1.html: body bodyDOM: Cross Domain Vulnerability 2.html: style @import url"1.html"; /style script setTimeoutfunction var s = document.body.currentStyle.DOM; alerts; ,0; /script Vulnerable: Opera 10.62 By: Securitylab.ir Original Advisory: http://Securitylab.ir/Advisories...

Opera crossite access

Crossite scripting via @import url...

Opera < 10.62 Path Subversion Arbitrary DLL Injection Code Execution

The version of Opera installed on the remote host is earlier than 10.62. Such versions insecurely look in their current working directory when resolving DLL dependencies, such as for 'dwmapi.dll' If another application can be made to launch Opera in such a way that it searches for DLLs in the sam...

Opera < 10.62 Path Subversion Arbitrary DLL Injection Code Execution

Binary data 800864.prm...

Opera < 10.62 Path Subversion Arbitrary DLL Injection Code Execution

Binary data 5661.prm...

Malicious DLL files can be unintentionally loaded and allowed to run arbitrary code

Opera uses dynamic link libraries DLLs of its own, and several provided by the host operating system or plug-ins. In some cases, Opera searches for these DLLs in the same location as a resource that is being loaded, and if a malicious DLL is located, it will load that as if it were a trusted DLL...

Malicious DLL files can be unintentionally loaded and allowed to run arbitrary code – Opera Security Advisories

Malicious DLL files can be unintentionally loaded and allowed to run arbitrary code – Opera Security Advisories OPCOM Team | September 8, 2010 Severity High Description Opera uses dynamic link libraries DLLs of its own, and several provided by the host operating system or plug-ins. In some cases,...

Opera 10.61 DLL Hijacking Exploit

/ Exploit Title: Opera DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Opera 10.61 Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .htm .mht .mhtml .xht .xhtm .xhtl dwmapi.dll is used i...

Opera v10.61 DLL Hijacking Exploit (dwmapi.dll)

No description provided by source. / Exploit Title: Opera DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Opera 10.61 Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .htm .mht .mhtml .x...

openSUSE Security Update : opera (openSUSE-SU-2010:0540-1)

This update of opera fixes the following vulnerabilities : - CVE-2010-2576: CVSS v2 Base Score: 6.8 CWE-94: unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven Krewitt of Secunia - CVE-2010-3019: CVSS v2 Base Score: 9.3 CWE-119: hea...

openSUSE Security Update : opera (openSUSE-SU-2010:0540-1)

This update of opera fixes the following vulnerabilities : - CVE-2010-2576: CVSS v2 Base Score: 6.8 CWE-94: unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven Krewitt of Secunia - CVE-2010-3019: CVSS v2 Base Score: 9.3 CWE-119: hea...

Opera 10.61 - dwmapi.dll DLL Hijacking

Opera 10.61 - dwmapi.dll DLL Hijacking / Exploit Title: Opera DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Opera 10.61 Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .htm .mht .mhtm...

Opera v10.61 DLL Hijacking (dwmapi.dll) Exploit

Exploit for windows platform in category local exploits =============================================== Opera v10.61 DLL Hijacking dwmapi.dll Exploit =============================================== / Exploit Title: Opera DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas...

Opera 10.61 - 'dwmapi.dll' DLL Hijacking

/ Exploit Title: Opera DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Opera 10.61 Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .htm .mht .mhtml .xht .xhtm .xhtl dwmapi.dll is used i...

FreeBSD Ports: opera

The remote host is missing an update to the system as announced in the referenced advisory. VID 71273c4d-a6ec-11df-8a8d-0008743bf21a OpenVAS Vulnerability Test $ Description: Auto generated from VID 71273c4d-a6ec-11df-8a8d-0008743bf21a Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: opera

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-3021

Unspecified vulnerability in Opera before 10.61 allows remote attackers to cause a denial of service CPU consumption and application hang via an animated PNG image...

CVE-2010-3020

The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions to arbitrary feeds via crafted content...

CVE-2010-3019

Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service application crash or hang via vectors related to HTML5 canvas painting operations that occur during the application of transformations...