|
|
>> Opera Browser Code Execution and Security Bypass Vulnerabilities
|
Multiple vulnerabilities have been identified in Opera, which could be exploited by attackers to bypass security restrictions, gain knowledge of sensitive information, or take complete control of an affected system.
The first issue is caused by an error when the browser is started by external applications when it was registered as a handler for a given protocol, which could be exploited by attackers to cause a crash or execute arbitrary code.
The second vulnerability is caused due to an error in the way the browser checks what frames can be changed, which could allow a malicious site to change the address of frames on other sites inside any opened window and display misleading information.
The third issue is caused by unspecified input validation errors that could allow cross-site scripting.
The fourth vulnerability is caused by an error when handling malformed parameters within custom shortcut and menu commands, which could be exploited by attackers to execute arbitrary code.
The fifth weakness is caused due to the browser incorrectly showning the padlock icon when insecure pages load content from secure sites into a frame, which could be exploited to cause the security information dialog to state that the connection is secure.
The sixth issue is caused by an error when handling feed links to local files, which could allow malicious web sites to discover if a file exists or not on a vulnerable system.
The seventh weakness is caused by an error when subscribing to a news feed using the feed subscription button, which could be exploited to change the page address.
Affected Products
Opera version 9.51 and prior
Solution
Upgrade to Opera version 9.52 :
http://www.opera.com/download/
References
http://www.vupen.com/english/advisories/2008/2416
http://www.opera.com/support/search/view/892/
http://www.opera.com/support/search/view/893/
http://www.opera.com/support/search/view/894/
http://www.opera.com/support/search/view/895/
http://www.opera.com/support/search/view/896/
http://www.opera.com/support/search/view/897/
http://www.opera.com/docs/changelogs/windows/952/
http://www.opera.com/docs/changelogs/linux/952/
Credits
Vulnerabilities reported by the vendor, Chris Weber (Casaba Security), Michael A. Puls II and Lars Kleinschmidt.
ChangeLog
2008-08-21 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
