Opera < 7.54.0 Remote Location Object XSS

Binary data 1774.prm...

Opera < 7.0.3 Multiple Vulnerabilities

Binary data 1764.prm...

Opera Web Browser < 7.5.4 Multiple Vulnerabilities

Binary data 1243.prm...

Opera < 7.54u1 Web Browser Resource Detection Weakness

Binary data 1782.prm...

Opera Local File/Directory Detection &#40;GM#009-OP&#41;

GreyMagic Security Advisory GM009-OP ===================================== By GreyMagic Software, 17 Aug 2004. Available in HTML format at http://www.greymagic.com/security/advisories/gm009-op/. Topic: Opera Local File/Directory Detection. Discovery date: 04 Aug 2004. Affected applications:...

Opera getElementsByTagName Javascript Method DoS

Binary data 2130.prm...

Opera < 9.51 Multiple Vulnerabilities

Binary data 4572.prm...

Opera < 9.50 Multiple Vulnerabilities

Binary data 4541.prm...

Opera Web Browser Version Detection

Binary data 8055.prm...

Opera < 8.54 signedness StyleSheet Overflow

Binary data 3515.prm...

Opera < 7.54 location Object Crafted URL Arbitrary Local File Access

The version of Opera on the remote host fails to block write access to the 'location' object. This could allow a user to create a specially crafted URL to overwrite methods within the 'location' object that would execute arbitrary code in a user's browser within the trust relationship between the...

Opera < 7.20 news URL Handling DoS

The version of Opera installed on the remote host reportedly crashes when processing a 'news:' URL of excessive length, that may result in a denial of service. It has been reported that this issue will trigger a condition that will prevent Opera from functioning until the program has been...

Opera < 7.23 Zip File Processing Crafted File Handling Overflow

The version of Opera on the remote host is vulnerable to a security weakness. A problem has been identified in the handling of zipped skin files by Opera. Because of this, it may be possible for an attacker to gain unauthorized access to a system using the vulnerable browser. C Tenable Network...

Opera < 7.23 File Download Encoded Traversal Arbitrary File Deletion

The version of Opera installed on the remote host contains a file corruption vulnerability. This issue is exposed when a user is presented with a file dialog, which will cause the creation of a temporary file. It is possible to specify a relative path to another file on the system using directory...

Opera < 7.51 favicon.ico Address Bar Spoofing

The version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information. It is reported that the 'favicon' feature can be used to spoof the domain of a malicious web page. An attacker can create an icon that includes the text of the desired...

Opera < 7.50 File Download Extension Spoofing

The version of Opera installed on the remote host contains a flaw that may allow a malicious user to trick a user into running arbitrary code. The issue is triggered when an malicious website provides a file for download, but crafts the filename in such a way that the file is executed, rather tha...

Opera < 7.50 JavaScript Engine Array Handling DoS

The version of Opera on the remote host is vulnerable to an issue when handling large JavaScript arrays. In particular, it is possible to crash the browser when performing various operations on Array objects with 99999999999999999999999 or 0x23000000 elements. The crash is due to a segmentation...

Opera < 7.50 onUnload Address Bar Spoofing

The remote host is using Opera - an alternative web browser. This version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information. This is reportedly possible through malicious use of the JavaScript 'unOnload' event handler when the brows...

Opera < 7.54 Multiple Function Address Bar Spoofing

The version of Opera installed on the remote host is vulnerable to a flaw wherein a remote attacker can obscure the URI, leading the user to believe that he/she is accessing a trusted resource. To exploit this issue, an attacker would need to set up a rogue website, then entice a local user to...

CVE-2004-0537

Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" favicon that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces...