4498 matches found
CVE-2007-5276
Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80...
CVE-2007-5276
Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80...
CVE-2007-5274
The CVE-2007-5274 entry concerns Sun JRE/JDK/J2SE (various 4.x/5.x/6.x releases) where, when a user runs Firefox or Opera, JavaScript outbound connections could be violated due to a multi-pin DNS rebinding flaw tied to the LiveConnect API. The vulnerability arises because JavaScript code relies o...
CVE-2007-5276
Opera 9 is vulnerable to DNS rebinding due to their DNS pinning behavior: the client drops pins based on failed connections to irrelevant TCP ports, enabling an attacker to use a port 81 URL in an IMG SRC to bypass the pin established for a session on port 80. Concrete details in the provided doc...
SUSE-SA:2007:050: opera
The remote host is missing the patch for the advisory SUSE-SA:2007:050 opera. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:050 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...
CVE-2007-4944
The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sensitive information memory contents via JavaScript...
CVE-2007-4944
The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sensitive information memory contents via JavaScript...
Design/Logic Flaw
The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sensitive information memory contents via JavaScript...
CVE-2007-4944
The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sensitive information memory contents via JavaScript...
CVE-2007-4944
CVE-2007-4944 affects Opera 9.x before 9.22 on Linux, FreeBSD, and Solaris. The underlying issue is that canvas.createPattern does not clear memory before using it to process a new pattern, which can allow a remote attacker to read memory contents via JavaScript. The vulnerability is described ac...
GLSA-200708-17 : Opera: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200708-17 Opera: Multiple vulnerabilities An error known as 'a virtual function call on an invalid pointer' has been discovered in the JavaScript engine CVE-2007-4367. Furthermore, iDefense Labs reported that an already-freed...
Opera: Multiple vulnerabilities
Background Opera is a multi-platform web browser. Description An error known as "a virtual function call on an invalid pointer" has been discovered in the JavaScript engine CVE-2007-4367. Furthermore, iDefense Labs reported that an already-freed pointer may be still used under unspecified...
FreeBSD : opera -- Vulnerability in javascript handling (df4a7d21-4b17-11dc-9fc2-001372ae3ab9)
An advisory from Opera reports : A specially crafted JavaScript can make Opera execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine a...
Opera Web浏览器非法指针远程代码执行漏洞
Opera Web Browser是一款流行开放源代码的WEB浏览器。 Opera Web Browser处理恶意Javascript存在NULL指针引用问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 虚拟函数调用非法指针可导致应用攻击者构建的数据，导致任意代码执行，目前没有详细漏洞细节提供。 Opera Software Opera Web Browser 9.22 Opera Software Opera Web Browser 9.21 Opera Software Opera Web Browser 9.20 beta1 Opera Software Opera Web...
Opera < 9.23 Arbitrary Code Execution
Binary data 4177.prm...
Opera < 9.23 Crafted Javascript Arbitrary Code Execution
The version of Opera installed on the remote host reportedly allows for execution of arbitrary code via specially crafted JavaScript if a user can be tricked into visiting a malicious site. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25900; scriptversion"1.17";...
CVE-2007-4367
Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."...
Design/Logic Flaw
Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."...