Opera Web Browser Multiple Security Vulnerabilities

Bugtraq ID:	26937
Class:	Unknown
CVE:	CVE-2007-6520 CVE-2007-6521 CVE-2007-6522 CVE-2007-6524
Remote:	Yes
Local:	No
Published:	Dec 19 2007 12:00AM
Updated:	May 28 2008 06:54PM
Credit:	David Bloom, Alexander Klink and Gynvael Coldwind are credited with the discovery of theses issues.
Vulnerable:	SuSE Linux 10.1 x86-64 SuSE Linux 10.1 x86 SuSE Linux 10.1 ppc S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 Opera Software Opera Web Browser 9.24 Opera Software Opera Web Browser 9.23 Opera Software Opera Web Browser 9.22 Opera Software Opera Web Browser 9.21 Opera Software Opera Web Browser 9.20 beta 1 Opera Software Opera Web Browser 9.20 Opera Software Opera Web Browser 9.10 Opera Software Opera Web Browser 9.02 Opera Software Opera Web Browser 9.01 Gentoo Linux
Not Vulnerable:	Opera Software Opera Web Browser 9.25

Opera Web Browser Multiple Security Vulnerabilities

Opera Web Browser is prone to multiple security vulnerabilities, including remote code-execution, information-disclosure, and cross-domain scripting issues.

Attackers can exploit these issues to execute remote code and obtain sensitive information in the context of the affected application. Attackers may be able to exploit some of the issues to carry out cross-domain scripting attacks.

These issues affect versions prior to Opera 9.25.

Very few technical details are currently available. We will update this BID as more information emerges.

Opera Web Browser Multiple Security Vulnerabilities

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Opera Web Browser Multiple Security Vulnerabilities

References:

• Advisory: Rich editing allows cross domain scripting (Opera Software)
  
• Changelog for Opera 9.25 for Windows (Opera Software)
  
• Opera Homepage (Opera Software)
  
• Security Advisory AKLINK-SA-2008-006 (Alexander Klink)