Opera Browser@7.01 Security Vulnerabilities and Issues — Opera Browser@7.01 CVE List

Lucene search

OperaOpera Browser7.01

11 matches found

CVE•added 2007/04/13 6:19 p.m.•54 views

CVE-2007-2022

Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information (browser keystrokes), which are leaked to the Flash Player applet.

6.8CVSS5.9AI score0.15365EPSS

CVE•added 2007/10/18 12:17 a.m.•51 views

CVE-2007-5476

Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Severe" impact and unknown attack vectors.

10CVSS9.4AI score0.20643EPSS

CVE•added 2007/12/24 8:46 p.m.•51 views

CVE-2007-6520

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins.

4.3CVSS5.9AI score0.00723EPSS

CVE•added 2007/12/24 8:46 p.m.•49 views

CVE-2007-6522

The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains.

4.3CVSS5.9AI score0.01361EPSS

CVE•added 2007/12/24 8:46 p.m.•47 views

CVE-2007-6524

Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap (BMP) file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420.

7.8CVSS5.9AI score0.02102EPSS

CVE•added 2007/01/09 2:28 a.m.•45 views

CVE-2007-0127

The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled pointer to be reference...

9.3CVSS7.2AI score0.09725EPSS

CVE•added 2007/10/18 12:17 a.m.•39 views

CVE-2007-5540

Unspecified vulnerability in Opera before 9.24 allows remote attackers to overwrite functions on pages from other domains and bypass the same-origin policy via unknown vectors.

7.5CVSS6.3AI score0.00759EPSS

CVE•added 2007/10/19 10:0 a.m.•38 views

CVE-2003-1397

The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method.

4.3CVSS6.7AI score0.05155EPSS

CVE•added 2007/01/29 4:28 p.m.•37 views

CVE-2006-6955

Opera allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723.

4.3CVSS6.4AI score0.08126EPSS

CVE•added 2007/12/24 8:46 p.m.•37 views

CVE-2007-6521

Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates.

10CVSS7.3AI score0.14741EPSS

CVE•added 2007/10/18 12:17 a.m.•34 views

CVE-2007-5541

Unspecified vulnerability in Opera before 9.24, when using an "external" newsgroup or e-mail client, allows remote attackers to execute arbitrary commands via unknown vectors.

9.3CVSS7.3AI score0.03029EPSS