opera -- multiple vulnerabilities

Opera reports: Certain constructs are not escaped correctly by Opera's History Search results. These can be used to inject scripts into the page, which can then be used to look through the user's browsing history, including the contents of the pages they have visited. These may contain sensitive...

FreeBSD : opera -- multiple vulnerabilities (fb84d5dd-9528-11dd-9a00-001999392805)

Opera reports : If a malicious page redirects Opera to a specially crafted address URL, it can cause Opera to crash. Given sufficient address content, the crash could cause execution of code controlled by the attacking page. Once a Java applet has been cached, if a page can predict the cache path...

Opera Web Browser URI重定向远程代码执行漏洞

BUGTRAQ ID: 31631 CNCAN ID：CNCAN-2008100914 Opera是一款开放源代码的WEB浏览器。 Opera存在设计问题，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 如果恶意页面重定向Opera到一个特殊构建的URL地址，可导致Opera崩溃，给定足够的地址内容，可能导致任意代码执行。 Opera Software Opera Web Browser 8.51 Opera Software Opera Web Browser 8.50 Opera Software Opera Web Browser 8.0.2 Opera Software...

Opera缓存Java Applet特权提升漏洞

BUGTRAQ ID: 31643 CNCAN ID：CNCAN-2008100913 Opera是一款开放源代码的WEB浏览器。 Opera存在安全绕过问题，远程攻击者可以利用漏洞执行缓存的Java Applet。 一旦Java Applet被缓存后，如果页面可预测Applet的缓存路径，可导致从缓存中装载Applet，导致以本地机器上下文执行。这可导致读取系统其他缓存文件或执行一些通常条件下受限操作。这些文件可包含敏感文件发送给攻击者。 Opera Software Opera Web Browser 8.51 Opera Software Opera Web Browser 8.5...

Opera Web Browser 8.51 - URI redirection Remote Code Execution

source: https://www.securityfocus.com/bid/31631/info Opera Web Browser is prone to a remote code-execution vulnerability. Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application or cause a denial-of-service condition. NOTE:...

Opera < 9.60 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 9.60 and thus reportedly affected by several issues : - Specially crafted URLs can cause Opera to crash or allow arbitrary code execution. - Once a Java applet has been cached, a page that can predict the cache path for that applet...

Opera Web Browser 8.51 - URI redirection Remote Code Execution

Opera Web Browser 8.51 - URI redirection Remote Code Execution source: https://www.securityfocus.com/bid/31631/info Opera Web Browser is prone to a remote code-execution vulnerability. Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the...

Opera < 9.60 Multiple Vulnerabilities

Binary data 4706.prm...

bluecoat-bypass.txt

Blue Coat K9 Web Protection V4.0.230 Beta Vulnerability Set 5, 2008 -- Affected Vendors: Blue Coat -- Affected Products: K9 Web Protection V4.0.230 Beta -- Download at: http://www1.k9webprotection.com/getk9/beta.php -- Vulnerability Details: A vulnerability exists in the Blue Coat K9 Web Protecti...

DoS vulnerability in Opera

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Denial of Service уязвимости в браузере Opera. DoS: Эксплоит: http://websecurity.com.ua/uploads/2008/Opera20DoS20Exploit4.html При запуске эксплоита браузер забирает 100 CPU и зависает. Уязвима версия Opera 9.52 и предыдущие версии. Дополнительная...

opera -- multiple vulnerabilities

Opera reports: If a malicious page redirects Opera to a specially crafted address URL, it can cause Opera to crash. Given sufficient address content, the crash could cause execution of code controlled by the attacking page. Once a Java applet has been cached, if a page can predict the cache path...

DoS vulnerability in Opera

Здравствуйте 3APA3A! Сообщаю вам о найденной мною новой Denial of Service уязвимости в Opera. Данная уязвимость является частью моего проекта Day of bugs in browsers http://websecurity.com.ua/2453/. DoS: Эксплоит: http://websecurity.com.ua/uploads/2008/Opera20DoS20Exploit3.html Уязвима версия Ope...

Advisory : Opera Window Object Suppressing Remote Denial of Service

Opera Window Object Suppressing Remote Denial of Service. Version Affected: Opera 9.52 Severity: High Description: The opera browser is vulnerable to window object based denial of service attack. The opera fails to sanitize a check when window.close function is called in number of dynamically...

Opera 9.52 Window Object Suppressing Remote Denial of Service Exploit

No description provided by source. Opera Window Object Suppressing Remote Denial of Service. Version Affected: Opera 9.52 Severity: High Description: The opera browser is vulnerable to window object based denial of service attack. The opera fails to sanitize a check when window.close function is...

operasuppress-dos.txt

Opera Window Object Suppressing Remote Denial of Service. Version Affected: Opera 9.52 Severity: High Description: The opera browser is vulnerable to window object based denial of service attack. The opera fails to sanitize a check when window.close function is called in number of dynamically...

Opera 9.52 - Window Object Suppressing Remote Denial of Service

Opera Window Object Suppressing Remote Denial of Service. Version Affected: Opera 9.52 Severity: High Description: The opera browser is vulnerable to window object based denial of service attack. The opera fails to sanitize a check when window.close function is called in number of dynamically...

Opera 9.52 Window Object Suppressing Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================================== Opera 9.52 Window Object Suppressing Remote Denial of Service Exploit ===================================================================== Opera Window Object Suppressing Remo...

Opera 9.52 - Window Object Suppressing Remote Denial of Service

Opera 9.52 - Window Object Suppressing Remote Denial of Service Opera Window Object Suppressing Remote Denial of Service. Version Affected: Opera 9.52 Severity: High Description: The opera browser is vulnerable to window object based denial of service attack. The opera fails to sanitize a check...

CVE-2008-4195

Opera before 9.52 does not properly restrict the ability of a framed web page to change the address associated with a different frame, which allows remote attackers to trigger the display of an arbitrary address in a frame via unspecified use of web script...

CVE-2008-4198

Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote attackers to trick a user into performing unsafe actions on the http page...