CVE-2007-6523

Algorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote attackers to cause a denial of service CPU consumption via a crafted bitmap BMP file that triggers a large number of calculations and checks...

CVE-2007-6524

Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap BMP file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420...

CVE-2007-6520

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins...

CVE-2007-6522

The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains...

CVE-2007-6520

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins...

CVE-2007-6521

Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates...

CVE-2007-6522

The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains...

CVE-2007-6523

Algorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote attackers to cause a denial of service CPU consumption via a crafted bitmap BMP file that triggers a large number of calculations and checks...

CVE-2007-6524

Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap BMP file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420...

CVE-2007-6520

Opera before 9.25 contains multiple vulnerabilities (CVE-2007-6520, CVE-2007-6521, CVE-2007-6522, CVE-2007-6524) that enable cross-domain scripting via plug-ins, TLS certificate handling that could allow arbitrary code execution, and memory disclosure through BMP/file handling. The issues affect ...

CVE-2007-6521

Opera before 9.25 is affected by a heap-based buffer overflow during TLS certificate parsing (specifically subject alternative names in X.509 certificates), which can allow remote attackers to cause a crash or execute arbitrary code. This vulnerability (CVE-2007-6521) was addressed in Opera 9.25,...

CVE-2007-6522

Opera prior to version 9.25 contains CVE-2007-6522 where rich text editing via designMode can be abused to perform cross-domain scripting. The vulnerability’s impact is described as enabling cross-site scripting by modifying contents in pages on other domains, with associated risk of information ...

CVE-2007-6523

CVE-2007-6523 affects Opera 9.50 beta and Opera 9.x prior to 9.25. The issue is a vulnerability in the handling of bitmap (BMP) files where a crafted BMP can trigger a large number of calculations and checks, leading to high CPU usage and a potential denial of service. The root cause is described...

CVE-2007-6524

Technical details for CVE-2007-6524 are not provided in the connected documents. The initial description mentions a memory-content leak via BMP in Opera before 9.25, but no concrete affected versions, root cause, impact, or fixes are included here. Monitor for updates.

CVE-2007-6524: Exposure of Sensitive Information to an Unauthorized Actor

Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap BMP file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420...

CVE-2007-6522: Improper Neutralization of Input During Web Page Generation

The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains...

CVE-2007-6520: Improper Neutralization of Input During Web Page Generation

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins...

CVE-2007-6521: Undefined Security Weakness

Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates...

CVE-2007-6523: Undefined Security Weakness

Algorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote attackers to cause a denial of service CPU consumption via a crafted bitmap BMP file that triggers a large number of calculations and checks...

FreeBSD : opera -- multiple vulnerabilities (31b045e7-ae75-11dc-a5f9-001a4d49522b)

Opera Software ASA reports about multiple security fixes : - Fixed an issue where plug-ins could be used to allow cross domain scripting, as reported by David Bloom. Details will be disclosed at a later date. - Fixed an issue with TLS certificates that could be used to execute arbitrary code, as...