CVE-2008-3078

Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read uninitialized memory contents by using JavaScript to read a canvas image...

Opera远程代码执行和信息泄漏漏洞

BUGTRAQ ID: 30068 CNCAN ID：CNCAN-2008070707 Opera是一款开放源代码的WEB浏览器。 Opera存在多个安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意代码或获得敏感信息。 -部分canvas函数处理存在缺陷，可导致canvas会从随机内存中使用少量数据进行绘制，结果导致canvas图像可通过JavaScript读取和分析，攻击者借此获得用户内存中的敏感数据。 -Opera还存在一个未明安全问题可导致以应用程序权限执行任意代码。 Opera Software Opera Web Browser 9.50 beta Opera...

Opera 9.51版本修复多个安全漏洞

BUGTRAQ ID: 30068 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的9.51之前版本中存在多个安全漏洞，可能允许恶意用户泄露敏感信息或远程执行任意指令。 Opera处理某些canvas函数的方式存在漏洞，导致用随机内存中的少量数据绘涂画布。用户可以使用JavaScript读取和分析所生成的画布图形，获得可能包含有敏感数据的随机用户内存；此外如果用户使用Opera访问了恶意网页的话，还可能导致执行任意指令。 Opera Software Opera 9.51 Opera Software --------------...

Opera < 9.51 Multiple Vulnerabilities

The version of Opera installed on the remote host reportedly is affected by several issues : - Specially crafted HTML canvas elements could reveal data from random areas of memory. - An unspecified arbitrary code execution vulnerability. - Improperly set security status when navigating from HTTP ...

Mozilla Foundation Security Advisory 2008-27

Mozilla Foundation Security Advisory 2008-27 Title: Arbitrary file upload via originalTarget and DOM Range Impact: High Announced: July 1, 2008 Reporter: Claudio Santambrogio Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.15 SeaMonkey 1.1.10 Description Opera developer Claudio Santambrogio...

Arbitrary file upload via originalTarget and DOM Range — Mozilla

Opera Software reported a vulnerability which allows malicious content to force the browser into uploading local files to the remote server. This could be used by an attacker to steal files from known locations on a victim's computer...

openSUSE 10 Security Update : opera (opera-5354)

This patch brings Opera to security update level 9.50 Following security problems were fixed: CVE-2008-2714: Opera before 9.26 allows remote attackers to misrepresent web page addresses using 'certain characters' that 'cause the page address text to be misplaced.' CVE-2008-2715: Unspecified...

Design/Logic Flaw

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks...

CVE-2008-2715

Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns...

Design/Logic Flaw

Opera before 9.26 allows remote attackers to misrepresent web page addresses using "certain characters" that "cause the page address text to be misplaced."...

CVE-2008-2716

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks...

Cross site scripting

Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns...

CVE-2008-2715

Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns...

CVE-2008-2714

Opera before 9.26 allows remote attackers to misrepresent web page addresses using "certain characters" that "cause the page address text to be misplaced."...

CVE-2008-2714

Opera before 9.26 allows remote attackers to misrepresent web page addresses using "certain characters" that "cause the page address text to be misplaced."...

CVE-2008-2716

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks...

CVE-2008-2716

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks...

CVE-2008-2715

Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns...

CVE-2008-2715

Summary: CVE-2008-2715 is an unspecified vulnerability in Opera prior to 9.5 that could allow remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns. This vulnerability is reflected in multiple advisories (SUSE/OpenSUSE patches; NVD entry) and is add...

CVE-2008-2714

Opera before 9.26 allows remote attackers to misrepresent web page addresses using "certain characters" that "cause the page address text to be misplaced."...