CVE-2004-1810

The Javascript engine in Opera 7.23 allows remote attackers to cause a denial of service crash by creating a new Array object with a large size value, then writing into that array...

CVE-2004-1810: Undefined Security Weakness

The Javascript engine in Opera 7.23 allows remote attackers to cause a denial of service crash by creating a new Array object with a large size value, then writing into that array...

CVE-2005-0457

Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGETMPDIR portage temporary directory...

CVE-2005-0235

The International Domain Name IDN support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks...

CVE-2005-1139

Opera 8 Beta 3 could display the Organizational information of SSL certificates using first-generation vetted certs, enabling spoofing and phishing attacks. The issue is addressed in Opera’s 8.0 update per SUSE-SA:2005:031 advisory; remediation is to upgrade to Opera 8.0+ (or later) where this is...

CVE-2005-1139

Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an SSL certificate, which is easily spoofed and can facilitate phishing attacks...

CVE-2005-1139: Undefined Security Weakness

Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an SSL certificate, which is easily spoofed and can facilitate phishing attacks...

CVE-2005-1139

Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an SSL certificate, which is easily spoofed and can facilitate phishing attacks...

Internationalized domain names (IDN) can be used for spoofing. – Opera Security Advisories

Internationalized domain names IDN can be used for spoofing. – Opera Security Advisories OPCOM Team | February 25, 2005 Summary Opera supports internationalized domain names IDN, which allowsfor example Russian or Chinese domain names to be written in theirown native scripts. However, this also...

CVE-2004-1615

Opera allows remote attackers to cause a denial of service invalid memory reference and application crash via a web page or HTML email that contains a TBODY tag with a large COL SPAN value, as demonstrated by mangleme...

CVE-2004-1615

Opera permits remote attackers to trigger a denial of service by crafting a web page or HTML email containing a TBODY tag with a large COL SPAN value, leading to an invalid memory reference and application crash. The provided documents identify the affected software as Opera and the impact as par...

CVE-2004-1615: Undefined Security Weakness

Opera allows remote attackers to cause a denial of service invalid memory reference and application crash via a web page or HTML email that contains a TBODY tag with a large COL SPAN value, as demonstrated by mangleme...

Opera 7.xFirefox 1.0Internet Explorer 6.0 - Information Disclosure

Opera 7.xFirefox 1.0Internet Explorer 6.0 - Information Disclosure source: https://www.securityfocus.com/bid/12723/info Multiple browsers are reported prone to an information disclosure weakness. This issue can allow an attacker to determine information such as the location of files, file names a...

Opera 7.x/Firefox 1.0/Internet Explorer 6.0 - Information Disclosure

source: https://www.securityfocus.com/bid/12723/info Multiple browsers are reported prone to an information disclosure weakness. This issue can allow an attacker to determine information such as the location of files, file names and user names on a vulnerable computer. Information gathered throug...

CVE-2005-0456

Opera 7.54 and earlier is vulnerable to a data: URI handling issue where base64-encoded binary data is not validated, allowing a malicious site to obscure the URL in the download dialog and potentially lead to arbitrary code execution. Connected advisories (Gentoo GLSA 200502-17, OpenVAS entries)...

CVE-2005-0457

CVE-2005-0457 affects Opera on Gentoo Linux (versions 7.54 and earlier) due to an insecure plugin path that allows local privilege escalation by placing malicious libraries in the PORTAGE_TMPDIR. Connected sources (Gentoo GLSA 200502-17) reiterate this as a vulnerability in Opera’s handling of pl...

CVE-2004-1491

CVE-2004-1491 affects Opera 7.54 and earlier. The vulnerability arises because Opera uses kfmclient exec to handle unknown MIME types, allowing a remote attacker to execute arbitrary code via a shortcut or launcher containing an Exec entry. Public documents confirm this as a real issue across mul...

CVE-2005-0457

Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGETMPDIR portage temporary directory...

CVE-2004-1489

Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remote attackers to gain sensitive information, such as user names and the installation directory...

CVE-2004-1490

Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces ASCII character code 160 in the 1 Content-Disposition or 2 Content-Type headers...