CVE-2010-4050

Opera before 10.63 allows remote attackers to cause a denial of service memory corruption by referencing an SVG document in an IMG element...

CVE-2010-4043

Opera before 10.63 does not prevent interpretation of a cross-origin document as a CSS stylesheet when the document lacks a CSS token sequence, which allows remote attackers to obtain sensitive information via a crafted document...

CVE-2010-4047

Opera before 10.63 is affected by a vulnerability where the security context of JavaScript on the error page is not correctly enforced, enabling user‑assisted remote XSS via a crafted site. Affected component: Opera browser (pre-10.63). Underlying cause: improper security context handling for err...

CVE-2010-4045

CVE-2010-4045 affects Opera before 10.63. The vulnerability arises because Opera does not properly restrict web scripts in unspecified circumstances involving reloads and redirects, allowing a remote attacker to spoof the Address Bar and perform cross-site scripting (XSS) attacks; in some cases t...

openSUSE Security Update : opera (openSUSE-SU-2010:0728-1)

Opera 10.63 fixes some security issues as described in their changelog: http://www.opera.com/docs/changelogs/unix/1063/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-3324. The text...

Opera v10.63 SVG animation Element Denial of Service

Exploit for windows platform in category dos / poc ==================================================== Opera v10.63 SVG animation Element Denial of Service ==================================================== Software Link: http://www.opera.com/ Version: 10.63 and previous Tested on: Ubuntu 10.1...

openSUSE Security Update : opera (openSUSE-SU-2010:0728-1)

Opera 10.63 fixes some security issues as described in their changelog: http://www.opera.com/docs/changelogs/unix/1063/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-3324. The text...

Opera 10.63 SVG Animation Denial Of Service

Exploit Title: Opera Denial of Service by SVG Element Date: 16, October 2010 Author: fla Software Link: http://www.opera.com/ Version: 10.63 and previous Tested on: Ubuntu 10.10 x64, Windows 7 x64...

Opera 10.63 - SVG Animation Element Denial of Service

Exploit Title: Opera Denial of Service by SVG Element Date: 16, October 2010 Author: fla Software Link: http://www.opera.com/ Version: 10.63 and previous Tested on: Ubuntu 10.10 x64, Windows 7 x64...

Opera 10.63 - SVG Animation Element Denial of Service

Opera 10.63 - SVG Animation Element Denial of Service Exploit Title: Opera Denial of Service by SVG Element Date: 16, October 2010 Author: fla Software Link: http://www.opera.com/ Version: 10.63 and previous Tested on: Ubuntu 10.10 x64, Windows 7 x64...

Opera Denial of Service Vulnerability

Opera是一款流行的WEB浏览器，支持多种平台。 Opera 10.63 Denial of Service Vulnerability 10.63 厂商补丁： Opera Software -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.opera.com/browser/download/ http://pouya.info/blog/userfiles/vul/Opera-DoS.rar...

Opera < 10.63 Multiple Vulnerabilities

The version of Opera installed on the remote host is prior to 10.63. It is, therefore, affected by the multiple vulnerabilities : - It is possible to bypass cross-domain checks and allow partial data theft by using CSS. 971 - It is possible to spoof the page address by modifying the size of the...

Opera < 10.63 Multiple Vulnerabilities

Binary data 800852.prm...

Opera < 10.63 Multiple Vulnerabilities

Binary data 5678.prm...

opera -- multiple vulnerabilities

The Opera Desktop Team reports: Fixed an issue that allowed cross-domain checks to be bypassed, allowing limited data theft using CSS, as reported by Isaac Dawson. Fixed an issue where manipulating the window could be used to spoof the page address. Fixed an issue with reloads and redirects that...

JavaScript might run in the wrong context if loaded from error page – Opera Security Advisories

JavaScript might run in the wrong context if loaded from error page – Opera Security Advisories OPCOM Team | October 11, 2010 Severity Moderate Description If Opera is sent to an invalid URL, an error page will be displayed along with a link to the URL. The URL linked to might run scripts, and in...

JavaScript might run in the wrong context if loaded from error page

If Opera is sent to an invalid URL, an error page will be displayed along with a link to the URL. The URL linked to might run scripts, and in some cases these scripts might be run in the wrong security context. This can be used to execute scripts in the context of an unrelated domain, which allow...

Manipulating the window can be used to spoof the page address – Opera Security Advisories

Manipulating the window can be used to spoof the page address – Opera Security Advisories OPCOM Team | October 6, 2010 Severity Low Description Web page scripts can be used to alter the size of the browser window. In some cases, this manipulation can cause the wrong part of the Web page address t...

Cross-domain checks may be bypassed, allowing limited data theft using CSS – Opera Security Advisories

Cross-domain checks may be bypassed, allowing limited data theft using CSS – Opera Security Advisories OPCOM Team | October 6, 2010 Severity Moderate Description CSS can be loaded cross-domain. In some cases, files that do not contain CSS may be partially interpreted as CSS. It is possible to mak...

Private video streams can be intercepted

Video content may be used as filler content for a HTML5 canvas, if the video format is natively supported by Opera. If the video and page are from the same site, the content of the canvas can be safely read out by scripts. In some cases, Opera does not check the video's origin correctly, and may...