CVE-2011-2641

CVE-2011-2641 affects Opera 11.11, where remote attackers can crash the app by manipulating the FONT element’s FACE attribute inside an IFRAME after setting the IFRAME SRC to about:blank. This vulnerability enables a Denial of Service and is documented with an exploit reference (exploit-db). Publ...

CVE-2011-2617

Technical details for CVE-2011-2617 are not publicly provided in the supplied documents; the materials only reiterate an unspecified denial-of-service vulnerability in Opera before 11.50. Monitor for updates.

CVE-2011-2631

The CVE-2011-2631 entry concerns Opera's CSS column-count handling in Opera prior to 11.11, which can cause a denial of service (infinite repaint loop leading to an app hang) when processing a crafted page. Connected sources confirm Opera as the affected product and indicate the root cause is imp...

CVE-2011-2613

CVE-2011-2613 affects Opera browsers prior to 11.50. The vulnerability arises in the Array.prototype.join implementation when called on a non-array object that contains initial holes, enabling a remote attacker to cause an application crash (DoS). The issue is documented across multiple vendors/a...

CVE-2011-2611

CVE-2011-2611 affects Opera browser prior to 11.50, with an unspecified vulnerability in the printing functionality that could be triggered by a crafted web page to cause application crash (DoS). Multiple vendor advisories confirm the issue and note that Opera 11.50 fixes address it. Remediation ...

CVE-2011-2622

CVE-2011-2622 affects the Opera web browser (pre-11.50) where a vulnerability in the Web Workers implementation can cause a denial of service (application crash) from remote attackers. The vectors are described as unknown in the primary description, with no explicit exploit details provided. Conn...

CVE-2011-2612

CVE-2011-2612: A denial-of-service vulnerability in Opera browser affecting versions before 11.50, triggered by processing unspecified content on a web page (demonstrated via progorod.ru). Public records (RH/SUSE/Gentoo advisories and OpenVAS notes) corroborate that Opera 11.50 fixed multiple sec...

CVE-2011-2621

Opera before 11.50 is vulnerable to a remote denial of service (crash) through form-layout related vectors. The vulnerability is described across multiple connected sources as an unspecified issue allowing remote exploitation, with remediation involving upgrading to Opera 11.50 or newer (as noted...

CVE-2011-2614

CVE-2011-2614 affects the SVG rendering in Opera prior to 11.50. The vulnerability allows a remote attacker to cause an application crash (DoS) by crafting a path with many drawn characters. Exploitation details are not provided in the sources; no in‑the‑wild exploit information is included. Reme...

CVE-2011-2616

Summary (CVE-2011-2616) : An unspecified vulnerability in Opera prior to 11.50 could be exploited remotely to cause a denial of service via memory consumption on a web page (demonstrated by test262.ecmascript.org). The connected documents consistently identify Opera as the affected product and de...

CVE-2011-2610

CVE-2011-2610 is an Opera browser vulnerability affecting versions before 11.50, described as an unspecified issue with unknown impact and attack vectors. The CVSS metrics in the initial record indicate a high-risk, network-exploitable flaw (AV:N/AC:L/Au:N/C:C/I:C/A:C; base score 10.0). Public ma...

Opera < 11.50 Multiple Vulnerabilities

The version of Opera installed on the remote Windows host is earlier than 11.50 and thus potentially affected by multiple vulnerabilities: - An error exists in the handling of data URIs that allows cross-site scripting in some unspecified cases. Issue 995 - An error exists in the browser's handli...

Opera Web Browser未明跨站脚本漏洞

Bugtraq ID: 48500 Opera是一款流行的WEB浏览器。 当处理"data" URL机制时存在错误，没有针对URI做强制的安全上下文继承，允许URI与其他页和源代码页面交互。可造成跨站脚本攻击。 Opera Software Opera Web Browser 11.11 Opera Software Opera Web Browser 11.01 Opera Software Opera Web Browser 11.00 Opera Software Opera Web Browser 10.63 Opera Software Opera Web Browser...

Opera Web Browser URL处理拒绝服务漏洞

Bugtraq ID: 48501 Opera是一款流行的WEB浏览器。 当尝试处理一个不能解析为合法URL的URL时，当装载时Opera会创建一个错误页显示给用户。如果创建了足够的非法URL，Opera会创建这些错误页面消耗所有磁盘控件，导致浏览器或系统崩溃。 Opera Software Opera Web Browser 11.11 Opera Software Opera Web Browser 11.01 Opera Software Opera Web Browser 11.00 Opera Software Opera Web Browser 10.63 Opera...

Opera < 11.50 Multiple Vulnerabilities

Binary data 5971.prm...

Opera < 11.50 Multiple Vulnerabilities

Binary data 800843.prm...

Issue with error pages can cause a system crash

When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...

Issue with error pages can cause a system crash – Opera Security Advisories

When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...

Data URIs may be used to initiate cross site scripting against unrelated sites

Data URIs are supposed to inherit the security context from the page that created them. In some cases, Opera does not enforce this correctly, and will allow unrelated data URIs to interact both with each other, and their source pages. This can be used to enable cross site scripting against the...

Data URIs may be used to initiate cross site scripting against unrelated sites – Opera Security Advisories

Data URIs are supposed to inherit the security context from the page that created them. In some cases, Opera does not enforce this correctly, and will allow unrelated data URIs to interact both with each other, and their source pages. This can be used to enable cross site scripting against the...