4488 matches found
Code injection
Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a "moderately severe issue."...
CVE-2009-4071
Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting XSS attacks via unspecified vectors...
CVE-2009-4072
Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a "moderately severe issue."...
CVE-2009-4071
Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting XSS attacks via unspecified vectors...
CVE-2009-4072
Opera 9.x/10.x vulnerable to CVE-2009-4072 (and related CVEs) as part of a set of high‑severity vulnerabilities. Affected product: Opera Web Browser (Windows/Linux). Issue type: Information Disclosure and unspecified vulnerabilities with potential for arbitrary code execution or DoS. Root cause/i...
CVE-2009-4071
CVE-2009-4071 affects the Opera web browser (notably Opera on Linux/Unix paths in the connected records) where, when exception stacktraces are enabled, scripting error messages from a site can be read by a different site, enabling information disclosure and cross-site scripting via unspecified ve...
CVE-2009-4072
Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a "moderately severe issue."...
Opera Web出错消息跨站脚本漏洞
BUGTRAQ ID: 37089 Opera是一款流行的WEB浏览器，支持多种平台。 正常情况下仅应在导致错误的页面上出现脚本出错消息，但在某些情况下可以无关变量内容的形式向其他站点传送出错消息，其中可能包含有敏感信息。如果这些站点将内容写入到了页面标记中，就可以使用攻击站点所提供的代码执行跨站脚本攻击。这个漏洞仅影响启用了对异常的栈追踪的系统（默认为禁用）。 Opera Software Opera 10.01 厂商补丁： Opera Software -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Opera < 10.10 Multiple Vulnerabilities
Binary data 5241.prm...
Opera < 10.10 Multiple Vulnerabilities
Binary data 800847.prm...
Opera Fixes Vulnerability with Latest Upgrade
With version 10.10 Opera Unite of its browser, Opera has fixed a format string vulnerability which can potentially be exploited to compromise systems. Read the full article. The H Security...
opera -- multiple vulnerabilities
Opera Team reports: Fixed a heap buffer overflow in string to number conversion Fixed an issue where error messages could leak onto unrelated sites Fixed a moderately severe issue, as reported by Chris Evans of the Google Security Team; details will be disclosed at a later date...
Opera 10.01 Remote Array Overrun (Arbitrary code execution)
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Opera 10.01 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 20.11.2009 CVE: CVE-2009-0689 Risk: High Remote: Yes...
PHP - MultiPart Form-Data Denial of Service (PoC)
!/usr/bin/python PHP MultiPart Form-Data Denial of Service proof of concept, 23-10-2009 Bogdan Calin [email protected] import httplib, urllib, sys, string, threading from string import replace from urlparse import urlparse def usage: print "" print " PHP MultiPart Form-Data Denial of Service...
Opera Web Browser 10.01 - dtoa() Remote Code Execution
Opera Web Browser 10.01 - dtoa Remote Code Execution source: https://www.securityfocus.com/bid/37078/info Opera Web Browser is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code. Failed attacks may cause denial-of-service conditions...
Heap buffer overflow in string to number conversion
Passing very long strings through the string to number conversion using JavaScript in Opera may result in heap buffer overflows. This also affects the dtoa routine, and was reported in CVE-2009-0689. In most cases Opera will just freeze or terminate, but in some cases this could lead to a crash...
Opera 10.01 Remote Array Overrun (Arbitrary code execution)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Opera 10.01 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 20.11.2009 CVE: CVE-2009-0689 Risk: High Remote: Yes Affected Software: - - Opera 10.01 -...
KDE KDELibs 4.3.3 Remote Array Overrun (Arbitrary code execution)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE KDELibs 4.3.3 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 20.11.2009 CVE: CVE-2009-0689 Risk: High Remote: Yes Affected Software: - - KDELibs...
Opera 10.01 Remote Array Overrun
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Opera 10.01 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 20.11.2009 CVE: CVE-2009-0689 Risk: High Remote: Yes Affected Software: - - Opera 10.01 -...
Heap buffer overflow in string to number conversion – Opera Security Advisories
Passing very long strings through the string to number conversion using JavaScript in Opera may result in heap buffer overflows. This also affects the dtoa routine, and was reported in CVE-2009-0689. In most cases Opera will just freeze or terminate, but in some cases this could lead to a crash...