|
|
|
>> Opera Browser Code Execution and Security Bypass Vulnerabilities
|
Multiple vulnerabilities have been identified in Opera, which could be exploited by attackers to bypass security restrictions, disclose sensitive information, cause a denial of service or compromise a vulnerable system.
The first issue is caused by a buffer overflow error when handling certain text-area contents, which could be exploited to execute arbitrary code.
The second vulnerability is caused by a memory corruption error when processing certain HTML constructs, which could be exploited to cause a crash or execute arbitrary code.
The third issue is caused by an input validation error in the feed preview feature when processing URLs, which could be exploited to inject malicious script.
The fourth vulnerability is caused by an error in the built-in XSLT templates that incorrectly handle escaped content, which could be exploited to inject scripted markup.
The fifth issue is caused by an unspecified error which could be exploited to reveal random data.
The sixth vulnerability is caused by an error when processing SVG images embedded using "img" tags, which can be exploited to execute Java or plugin content.
Affected Products
Opera versions prior to 9.63
Solution
Upgrade to Opera version 9.63 :
http://www.opera.com/download/get.pl?id=31941&thanks=true&sub=true
References
http://www.vupen.com/english/advisories/2008/3448
http://www.opera.com/docs/changelogs/windows/963/
http://www.opera.com/support/kb/view/920/
http://www.opera.com/support/kb/view/921/
http://www.opera.com/support/kb/view/923/
http://www.opera.com/support/kb/view/924/
Credits
Vulnerabilities reported by Red XIII, Alexios Fakos, David Bloom, Robert Swiecki (Google Security Team), Matthew (Hispasec Sistemas) and Chris Evans.
ChangeLog
2008-12-17 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
