>> Opera Remote Code Execution and Information Disclosure Vulnerabilities
Title : Opera Remote Code Execution and Information Disclosure Vulnerabilities VUPEN ID : VUPEN/ADV-2008-2765 CVE ID : CVE-2008-4694 - CVE-2008-4695 CWE ID : CWE-119 - CWE-264
Rated as : Critical
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2008-10-08
Two vulnerabilities have been identified in Opera, which could be exploited by remote attackers to gain knowledge of sensitive information or compromise a vulnerable system.
The first issue is caused by an error when processing page redirects to a specially crafted address (URL), which could be exploited by attackers to crash an affected browser or execute arbitrary code.
The second vulnerability is caused by an error when caching Java applet, which could allow attackers to load an applet from the cache, causing it to run in the context of the local machine and read arbitrary cache files.
