CVE-2010-3019

Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service application crash or hang via vectors related to HTML5 canvas painting operations that occur during the application of transformations...

CVE-2010-2576

CVE-2010-2576 (Opera) affects Opera pre-10.61. The issue arises because download dialogs that become visible after a tab change are not properly suppressed, enabling a clickjacking vector. A remote attacker could exploit this to trigger arbitrary code execution via vectors involving (1) closing a...

CVE-2010-3021

Opera before 10.61 is affected by an unspecified vulnerability that can be exploited remotely to cause a denial of service (CPU consumption and application hang) via an animated PNG image. The issue is documented across multiple advisories (CVE-2010-3021). Impact is limited to the vulnerability c...

CVE-2010-3020

Opera before 10.61 contains a vulnerability in the news-feed preview where scripts are not properly removed, allowing an attacker to force subscriptions to arbitrary feeds via crafted content. Affected software: Opera browser (pre-10.61). Root cause: improper sanitization/removal of scripts in th...

CVE-2010-3019

CVE-2010-3019 refers to a heap-based buffer overflow in Opera prior to 10.61. The overflow occurs in HTML5 canvas painting during application of transformations, allowing a remote attacker to execute arbitrary code or cause a denial of service (application crash/hang). Multiple connected advisori...

CVE-2010-2576

Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change, which allows remote attackers to conduct clickjacking attacks, and consequently execute arbitrary code, via vectors involving 1 closing a tab or 2 hiding a tab, a related issue ...

CVE-2010-3021

Unspecified vulnerability in Opera before 10.61 allows remote attackers to cause a denial of service CPU consumption and application hang via an animated PNG image...

CVE-2010-3020

The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions to arbitrary feeds via crafted content...

Opera file download dialog spoofing

It's possible to place windows on the top of file download dialog and to close it right before user's click...

Secunia Research: Opera "Download" Dialog File Execution Security Issue

====================================================================== Secunia Research 12/08/2010 - Opera "Download" Dialog File Execution Security Issue - ====================================================================== Table of Contents Affected...

Opera Browser Multiple Vulnerabilities (Aug 2010) - Windows

Opera Browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Browser Multiple Vulnerabilities August-10 (Windows)

The host is installed with Opera Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnaug10win.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser Multiple Vulnerabilities August-10 Windows Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone...

FreeBSD : opera -- multiple vulnerabilities (71273c4d-a6ec-11df-8a8d-0008743bf21a)

The Opera Destkop Team reports : - Fixed an issue where heap buffer overflow in HTML5 canvas could be used to execute arbitrary code, as reported by Kuzzcc. - Fixed an issue where unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven...

Opera Update Closes Severe Heap Overflow Hole

Opera Software has released version 10.61 of the Opera web browser to fix a high severity hole. The issue was a heap overflow in the HTML5 canvas when performing some painting operations, which could in some cases be used to execute code. Read the full article. The H Security...

Opera < 10.61 Multiple Vulnerabilities

Binary data 800844.prm...

Opera < 10.61 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 10.61. Such versions are potentially affected by the following issues : - A heap overflow when performing painting operations on an HTML5 canvas can result in execution of arbitrary code. 966 - An issue with tab focus is open to an...

Heap buffer overflow in HTML5 canvas can be used to execute arbitrary code – Opera Security Advisories

Heap buffer overflow in HTML5 canvas can be used to execute arbitrary code – Opera Security Advisories OPCOM Team | August 12, 2010 Severity High Description Performing some painting operations on a canvas while certain transformations are being applied in Opera may result in heap buffer overflow...

Unexpected changes in tab focus can be used to run programs from the Internet – Opera Security Advisories

Unexpected changes in tab focus can be used to run programs from the Internet – Opera Security Advisories OPCOM Team | August 12, 2010 Severity Moderate Description Tabs may be used to obscure a download dialog that is visible in another tab. The dialog will allow the user to choose to run...

Unexpected changes in tab focus can be used to run programs from the Internet

Tabs may be used to obscure a download dialog that is visible in another tab. The dialog will allow the user to choose to run downloaded executables directly. If the tab is closed or hidden at the moment that a user was about to click, they can end up clicking on the buttons in the dialog, causin...

News feed preview can subscribe to feeds without interaction

When Opera is previewing a news feed, certain types of content do not have their scripts removed correctly. These scripts are able to subscribe the user to the feed without their consent...