4488 matches found
CVE-2008-1764
CVE-2008-1764 affects Opera before 9.27. The vulnerability is described as related to keyboard handling of password inputs, with undefined attack vectors/impact in the initial entry, but related connected sources (GLSA and SUSE Gentoo advisories) specify that multiple Opera vulnerabilities could ...
CVE-2008-1762
Opera before 9.27 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption...
FreeBSD : opera -- multiple vulnerabilities (ad4a00fa-0157-11dd-8bd3-001372ae3ab9)
Opera Software reports of multiple security issues in Opera. All of them can lead to arbitrary code execution. Details are as the following : - Newsfeed prompt can cause Opera to execute arbitrary code - Resized canvas patterns can cause Opera to execute arbitrary code %NASLMINLEVEL 70300 C Tenab...
openSUSE 10 Security Update : opera (opera-5154)
A flaw when processing images could crash opera. Attackers could potentially even exploit that to execute code. This update upgrades opera to version 9.27 to fix the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
Opera Web浏览器9.27版本修复多个内存破坏漏洞
BUGTRAQ ID: 28585 Opera是一款流行的WEB浏览器,支持多种平台。 Opera的实现上存在多个安全漏洞,远程攻击者可能利用这些漏洞控制用户系统。 当Opera遇到网页上的newsfeed源时,就会提示用户添加该源为newsfeed。恶意脚本可以控制feed源,导致Opera由于错误的内存访问而出现崩溃或执行任意指令。 HTML CANVAS单元可使用度量图形作为图样。如果精心控制了图形的度量的话,脚本就会导致Opera由于内存破坏而出现崩溃或执行任意代码。 Opera Software Opera = 9.26 Opera Software -------------...
Opera Web Browser 9.26 - Multiple Vulnerabilities
Opera Web Browser 9.26 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/28585/info Opera Web Browser is prone to multiple security vulnerabilities that may allow remote attackers to execute code. These issues lead to memory corruption and may result in remote unauthorized acce...
Opera < 9.27 Multiple Vulnerabilities
Binary data 4457.prm...
Opera < 9.27 Multiple Vulnerabilities
The version of Opera installed on the remote host reportedly is affected by several issues : - Resized canvas patterns can lead to a program crash with possible memory corruption. - A newsfeed prompt can cause Opera to execute arbitrary code. - Improved keyboard handling of password inputs. C...
opera -- multiple vulnerabilities
Opera Software reports of multiple security issues in Opera. All of them can lead to arbitrary code execution. Details are as the following: Newsfeed prompt can cause Opera to execute arbitrary code Resized canvas patterns can cause Opera to execute arbitrary code...
Opera Web Browser 9.26 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/28585/info Opera Web Browser is prone to multiple security vulnerabilities that may allow remote attackers to execute code. These issues lead to memory corruption and may result in remote unauthorized access and denial-of-service attacks. Versions prior t...
GLSA-200803-09 : Opera: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200803-09 Opera: Multiple vulnerabilities Mozilla discovered that Opera does not handle input to file form fields properly, allowing scripts to manipulate the file path CVE-2008-1080. Max Leonov found out that image comments might...
Opera browser multiple security vulnerabilities
Information leakage on form file upload, images comments scrip execution , DOM sanitization filters bypass...
[ GLSA 200803-09 ] Opera: Multiple vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
Opera: Multiple vulnerabilities
Background Opera is a fast web browser that is available free of charge. Description Mozilla discovered that Opera does not handle input to file form fields properly, allowing scripts to manipulate the file path CVE-2008-1080. Max Leonov found out that image comments might be treated as scripts,...
Cross site scripting
Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting XSS attacks via crafted attribute values in an XML document, which are not properly handled during DOM presentation...
CVE-2008-1082
Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting XSS attacks via crafted attribute values in an XML document, which are not properly handled during DOM presentation...
CVE-2008-1081
Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties...
CVE-2008-1080
Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input...
Design/Logic Flaw
Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties...