Opera 10.61 - dwmapi.dll DLL Hijacking

Opera 10.61 - dwmapi.dll DLL Hijacking / Exploit Title: Opera DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Opera 10.61 Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader" Vulnerable extensions: .htm .mht .mhtm...

FreeBSD Ports: opera

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: opera

The remote host is missing an update to the system as announced in the referenced advisory. VID 71273c4d-a6ec-11df-8a8d-0008743bf21a OpenVAS Vulnerability Test $ Description: Auto generated from VID 71273c4d-a6ec-11df-8a8d-0008743bf21a Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

CVE-2010-3020

The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions to arbitrary feeds via crafted content...

CVE-2010-3021

Unspecified vulnerability in Opera before 10.61 allows remote attackers to cause a denial of service CPU consumption and application hang via an animated PNG image...

CVE-2010-3019

Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service application crash or hang via vectors related to HTML5 canvas painting operations that occur during the application of transformations...

CVE-2010-2576

Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change, which allows remote attackers to conduct clickjacking attacks, and consequently execute arbitrary code, via vectors involving 1 closing a tab or 2 hiding a tab, a related issue ...

Sql injection

Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change, which allows remote attackers to conduct clickjacking attacks, and consequently execute arbitrary code, via vectors involving 1 closing a tab or 2 hiding a tab, a related issue ...

Code injection

The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions to arbitrary feeds via crafted content...

CVE-2010-3019

Heap-based buffer overflow in Opera before 10.61 allows remote attackers to execute arbitrary code or cause a denial of service application crash or hang via vectors related to HTML5 canvas painting operations that occur during the application of transformations...

CVE-2010-2576

CVE-2010-2576 (Opera) affects Opera pre-10.61. The issue arises because download dialogs that become visible after a tab change are not properly suppressed, enabling a clickjacking vector. A remote attacker could exploit this to trigger arbitrary code execution via vectors involving (1) closing a...

CVE-2010-3019

CVE-2010-3019 refers to a heap-based buffer overflow in Opera prior to 10.61. The overflow occurs in HTML5 canvas painting during application of transformations, allowing a remote attacker to execute arbitrary code or cause a denial of service (application crash/hang). Multiple connected advisori...

CVE-2010-3020

Opera before 10.61 contains a vulnerability in the news-feed preview where scripts are not properly removed, allowing an attacker to force subscriptions to arbitrary feeds via crafted content. Affected software: Opera browser (pre-10.61). Root cause: improper sanitization/removal of scripts in th...

CVE-2010-3021

Opera before 10.61 is affected by an unspecified vulnerability that can be exploited remotely to cause a denial of service (CPU consumption and application hang) via an animated PNG image. The issue is documented across multiple advisories (CVE-2010-3021). Impact is limited to the vulnerability c...

CVE-2010-3021

Unspecified vulnerability in Opera before 10.61 allows remote attackers to cause a denial of service CPU consumption and application hang via an animated PNG image...

CVE-2010-2576

Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change, which allows remote attackers to conduct clickjacking attacks, and consequently execute arbitrary code, via vectors involving 1 closing a tab or 2 hiding a tab, a related issue ...

CVE-2010-3020

The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions to arbitrary feeds via crafted content...

Opera file download dialog spoofing

It's possible to place windows on the top of file download dialog and to close it right before user's click...

Secunia Research: Opera "Download" Dialog File Execution Security Issue

====================================================================== Secunia Research 12/08/2010 - Opera "Download" Dialog File Execution Security Issue - ====================================================================== Table of Contents Affected...

Opera Browser Multiple Vulnerabilities August-10 (Windows)

The host is installed with Opera Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnaug10win.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser Multiple Vulnerabilities August-10 Windows Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone...