4488 matches found
Integer overflow
Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow...
CVE-2010-1349
Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow...
CVE-2010-1349
Opera 10.10–10.50 contains a Content-Length header handling bug that can trigger a heap overflow, enabling remote code execution. Multiple connected advisories confirm a buffer/heap overflow vulnerability in Opera related to processing HTTP server replies and Content-Length values. Affected versi...
CVE-2010-1349
Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow...
IE/Opera source code viewer Null Character Handling
No description provided by source. Exploit Title: IE/Opera source code viewer Null Character Handling Vulnerability Date: 10/04/2010 Author: Daniel Correa Software Link: http://www.microsoft.com/windows/internet-explorer/default.aspx Software Link: http://www.opera.com/download/ Version: Tested o...
Microsoft Internet ExplorerOpera - Source Code viewer Null Character Handling
Microsoft Internet ExplorerOpera - Source Code viewer Null Character Handling Exploit Title: IE/Opera source code viewer Null Character Handling Vulnerability Date: 10/04/2010 Author: Daniel Correa Software Link: http://www.microsoft.com/windows/internet-explorer/default.aspx Software Link:...
IE/Opera source code viewer Null Character Handling
Exploit for windows platform in category remote exploits =================================================== IE/Opera source code viewer Null Character Handling =================================================== Exploit Title: IE/Opera source code viewer Null Character Handling Vulnerability Dat...
Microsoft Internet Explorer/Opera - Source Code viewer Null Character Handling
Exploit Title: IE/Opera source code viewer Null Character Handling Vulnerability Date: 10/04/2010 Author: Daniel Correa Software Link: http://www.microsoft.com/windows/internet-explorer/default.aspx Software Link: http://www.opera.com/download/ Version: Tested on IE 8, Opera 10.51 Tested on:...
CVE-2010-1310
Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages...
Design/Logic Flaw
Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages...
CVE-2010-1310
CVE-2010-1310 affects Opera 10.50, where crafted XSLT constructs can cause the browser to return cached contents of other pages, enabling information disclosure. Root cause: XSLT processing allows access to cached documents. Impact: remote attackers may obtain sensitive information. Exploitation ...
CVE-2010-1310
Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages...
WordPress NextGEN Gallery Plugin <= 1.5.1 - XSS Vulnerability
This NextGEN Gallery plugin is prone to a cross-site scripting vulnerability. It is really popular plugin for the WordPress content management system, usually found as a blogging platform. The vulnerability manipulates the mode parameter of the xml/media-rss.php script and it results that...
Opera Web浏览器XSLT跨域信息泄露漏洞
BUGTRAQ ID: 38892 Opera是一款流行的WEB浏览器，支持多种平台。 正常情况下XSLT受到严格的控制以防独立站点的文档读取其他站点的内容。某些XSLT construct可能导致Opera从所生成的文档检索错误的内容，这些内容会随机的出现在缓存的之前访问页面中，其中可能包含有敏感信息。 Opera Software Opera 10.50 厂商补丁： Opera Software -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.opera.com/browser/download/...
Opera 10.51 Closes HTTP Header Holes
Opera has announced the release of version 10.51 of its web browser for Windows-based systems, closing two “highly severe” security holes. The security and stability update addresses a previously reported vulnerability caused by an incorrectly set value in HTTP headers. Read the full article. The...
Opera < 10.51 Multiple Vulnerabilities
Binary data 5484.prm...
Opera < 10.51 Multiple Vulnerabilities
Binary data 800851.prm...
Opera < 10.51 Multiple Vulnerabilities
The version of Opera installed on the remote host is earlier than 10.51. Such versions are potentially affected by multiple issues : - Large values in the HTTP Content-Length header can be used to execute arbitrary code. 948 - XSLT can be used to retrieve random contents of unrelated documents. 9...
XSLT can be used to retrieve random contents of unrelated documents – Opera Security Advisories
XSLT can be used to retrieve random contents of unrelated documents – Opera Security Advisories OPCOM Team | March 18, 2010 Affected versions This vulnerability affects Opera 10.50. Severity Highly severe Description XSLT is normally subject to strict controls, preventing documents from separate...
HTTP Content-Length header can be used to execute arbitrary code
Large values in the HTTP Content-Length header can cause Opera to crash. Certain specific values can cause a memory corruption, which in some cases can allow arbitrary code to be injected and executed. In most cases Opera will just crash. To inject code, additional techniques will have to be...