CVE-2002-2414

Opera 6.0.3, when used with Squid 2.4 as an HTTPS proxy, does not properly handle accepting a non-global certificate authority (CA) certificate from a site before establishing a subsequent HTTPS connection, which can allow remote attackers to cause a denial of service (crash). The connected docum...

GLSA-200710-31 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200710-31 Opera: Multiple vulnerabilities Michael A. Puls II discovered an unspecified flaw when launching external email or newsgroup clients CVE-2007-5541. David Bloom discovered that when displaying frames from different...

Opera browser multiple security vulnerabilities

Code execution, crossite access...

[ GLSA 200710-31 ] Opera: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200710-31 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Opera: Multiple vulnerabilities

Background Opera is a multi-platform web browser. Description Michael A. Puls II discovered an unspecified flaw when launching external email or newsgroup clients CVE-2007-5541. David Bloom discovered that when displaying frames from different websites, the same-origin policy is not correctly...

CVE-2002-2358

CVE-2002-2358 is an XSS vulnerability in Opera’s FTP view feature (versions 6.0 and 6.01–6.04) allowing injection of arbitrary script/HTML via the title tag of an FTP URL. Connected sources (e.g., Red Hat CVE page) corroborate the same description. The vulnerability arises from unsafe handling of...

CVE-2002-2358

Cross-site scripting XSS vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL...

CVE-2002-2332

Buffer overflow in Opera 6.01 allows remote attackers to cause a denial of service crash via an IMG tag with large width and height attributes...

CVE-2002-2332

CVE-2002-2332 concerns a buffer overflow in Opera 6.01 triggered by an IMG tag with oversized width/height attributes, enabling a remote attacker to cause a denial-of-service crash. The connected documents confirm the issue but do not provide exploitation details or a fix. No remediation is speci...

CVE-2002-2312

Technical details about CVE-2002-2312 are not publicly available in the provided connected documents. The available records repeat the basic description without added affected versions, impact specifics, or remediation guidance. Monitor for updates from official advisories.

CVE-2002-2312

Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript 1 event.ctrlKey or 2 event.shiftKey onkeydown event contained in a webpage...

FreeBSD : opera -- multiple vulnerabilities (44224e08-8306-11dc-9283-0016179b2dd5)

An advisory from Opera reports : If a user has configured Opera to use an external newsgroup client or e-mail application, specially crafted Web pages can cause Opera to run that application incorrectly. In some cases this can lead to execution of arbitrary code. When accessing frames from...

openSUSE 10 Security Update : opera (opera-4575)

This version update of Opera to 9.24 fixes numerous defects including some security problems. CVE-2007-5540,CVE-2007-5541 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-4575. The text...

CVE-2003-1420

CVE-2003-1420 is a documented XSS vulnerability in Opera versions 6.0 through 7.0, where remote attackers could inject arbitrary script or HTML by abusing the HTTP Location header when automatic redirection is disabled. The vulnerability arises from how Opera handles redirects, enabling arbitrary...

CVE-2003-1420

Cross-site scripting XSS vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbitrary web script or HTML via the HTTP Location header...

Opera浏览器远程代码执行及绕过同源策略漏洞

BUGTRAQ ID: 26100,26102 CVECAN ID: CVE-2007-5540,CVE-2007-5541 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的实现上存在多个漏洞，远程攻击者可能利用这些漏洞控制用户系统。 如果用户将Opera配置为使用外部新闻组客户端或邮件应用程序的话，特制的网页可能导致Opera错误地运行该应用程序，在某些情况下这可能导致执行任意指令。 在访问不同站点的帧的时候，特制的脚本可能绕过同源策略覆盖这些帧的函数。如果之后页面的脚本运行了这些函数的话，就可能导致在目标站点的环境中运行攻击者所提供的脚本。 Opera Softwar...

CVE-2003-1388

CVE-2003-1388 describes a buffer overflow in Opera 7.02 Build 2668 that can be triggered by a long HTTP request ending with a .ZIP extension, allowing a remote attacker to crash the browser. The affected software is Opera (version 7.02, build 2668). The underlying cause is a buffer overflow in th...

CVE-2003-1388

Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension...

CVE-2003-1396

CVE-2003-1396 describes a heap-based buffer overflow in Opera versions 6.05 through 7.10 triggered by a filename with a long extension. This enables remote attackers to cause a denial of service (crash) and possibly execute arbitrary code. The root cause is a vulnerable handling of file extension...

CVE-2003-1396

Heap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a filename with a long extension...