Code injection

Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe issue."...

CVE-2009-0915

Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to plug-ins...

CVE-2009-0915

CVE-2009-0915 affects Opera Web Browser prior to version 9.64, enabling remote cross-domain scripting via plug-ins. The linked SUSE/OpenVAS entries confirm Opera 9.64 as the remediation path and reference related CVEs (CVE-2009-0914, -0915, -0916). Affected component: Opera browser core with plug...

CVE-2009-0916

Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe issue."...

CVE-2009-0914

Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption...

CVE-2009-0914

Opera before 9.64 is affected by CVE-2009-0914. A crafted JPEG image can trigger memory corruption, allowing a remote attacker to execute arbitrary code. The issue is fixed in Opera 9.64; updates and changelogs in Linux/Windows/macOS releases document this fix. Organizations using Opera should up...

CVE-2009-0916

Opera before 9.64 is affected by multiple vulnerabilities tracked as CVE-2009-0914, CVE-2009-0915, and CVE-2009-0916. OpenVAS and SUSE notes describe high-impact issues in the Opera Web Browser (Windows/Linux), with the CVSS base score of 10.0 (complete confidentiality, integrity, and availabilit...

FreeBSD : opera -- multiple vulnerabilities (8c5205b4-11a0-11de-a964-0030843d3802)

Opera Team reports : An unspecified error in the processing of JPEG images can be exploited to trigger a memory corruption. An error can be exploited to execute arbitrary script code in a different domain via unspecified plugins. An unspecified error has a 'moderately severe' impact. No further...

opera -- multiple vulnerabilities

Opera Team reports: An unspecified error in the processing of JPEG images can be exploited to trigger a memory corruption. An error can be exploited to execute arbitrary script code in a different domain via unspecified plugins. An unspecified error has a "moderately severe" impact. No further...

TikiWiki 2.2 XSS Vulnerability in URI

Application: TikiWiki Version: 2.2 latest Website: www.tikiwiki.org Bug: Active XSS in URI Exploitation: Remote Date: 12 Mar 2009 Discovered by: iliz Author: iliz Contact: e-mail: iliz-zatyandexdotru Bug Description: TikiWiki version 2.2 and later uses URI in html response body and fails to...

TikiWiki 2.2 Cross Site Scripting

Application: TikiWiki Version: 2.2 latest Website: www.tikiwiki.org Bug: Active XSS in URI Exploitation: Remote Date: 12 Mar 2009 Discovered by: iliz Author: iliz Contact: e-mail: iliz-zatyandexdotru Bug Description: TikiWiki version 2.2 and later uses URI in html response body and fails to...

Opera < 9.64 Multiple Vulnerabilities

Binary data 4945.prm...

Pwn2Own hacker: Safari is 'easy pickings'

Charlie Miller right, the security researcher who won last year’s Pwn2Own hacker contest, is predicting that Apple’s Safari browser will be the easiest target this year. In a note posted on the popular Daily Dave mailing list, Miller describes Safari as “easy pickin’s” and forecasts that at least...

Opera plugs code-execution vulnerabilities

Opera Software has shipped a high-priority security patch for its flagship Web browser to plug at least three vulnerabilities that expose Windows users to code execution and cross-domain scripting attacks. The Opera 9.64 upgrade also adds support for DEP Data Execution Prevention and ASLR Address...

Opera < 9.64 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 9.64 and thus reportedly affected by multiple issues : - A memory-corruption vulnerability when processing specially crafted JPEG files could allow an attacker to execute arbitrary code with the privileges of the affected...

Specially crafted JPEG images can be used to execute arbitrary code

Specially crafted JPEG images can cause Opera to corrupt memory and crash. Successful exploitation can lead to execution of arbitrary code...

Specially crafted JPEG images can be used to execute arbitrary code – Opera Security Advisories

Specially crafted JPEG images can be used to execute arbitrary code – Opera Security Advisories OPCOM Team | February 25, 2009 Severity Extremely Severe Problem Description Specially crafted JPEG images can cause Opera to corrupt memory and crash. Successful exploitation can lead to execution of...

TLS certificates can be used to execute arbitrary code

When connecting to a TLS-protected website, Opera parses the X.509 certificate. If a site uses a specially crafted Subject Alternative Name in the certificate, it can cause Opera to crash. To inject code, additional means will have to be employed...

TLS certificates can be used to execute arbitrary code – Opera Security Advisories

TLS certificates can be used to execute arbitrary code – Opera Security Advisories OPCOM Team | February 13, 2009 Severity Highly Severe Problem Description When connecting to a TLS-protected website, Opera parses the X.509 certificate. If a site uses a specially crafted Subject Alternative Name ...

Charset Inheritance vulnerability in Internet Explorer 6 и Google Chrome

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Charset Inheritance уязвимости в Internet Explorer 6 и Google Chrome. В дополнение к ранее опубликованной информации http://securityvulns.ru/news/Browsers/Charset/XSS.html о данной уязвимости в других браузерах. Данная уязвимость в браузерах,...