BID:29684

Opera Web Browser 9.27 Multiple Security Vulnerabilities

Info

Opera Web Browser 9.27 Multiple Security Vulnerabilities

Bugtraq ID:	29684
Class:	Unknown
CVE:	CVE-2008-2714 CVE-2008-2715 CVE-2008-2716
Remote:	Yes
Local:	No
Published:	Jun 12 2008 12:00AM
Updated:	Jun 19 2008 05:01PM
Credit:	Tony Thommes, Philip Taylor, Opera
Vulnerable:	S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 Opera Software Opera Web Browser 9.27 Opera Software Opera Web Browser 9.26 Opera Software Opera Web Browser 9.25 Opera Software Opera Web Browser 9.24 Opera Software Opera Web Browser 9.23 Opera Software Opera Web Browser 9.22 Opera Software Opera Web Browser 9.21 Opera Software Opera Web Browser 9.20 beta 1 Opera Software Opera Web Browser 9.20 Opera Software Opera Web Browser 9.10 Opera Software Opera Web Browser 9.02 Opera Software Opera Web Browser 9.01 Opera Software Opera Web Browser 9

Not Vulnerable:	Opera Software Opera Web Browser 9.5

Discussion

Opera Web Browser 9.27 Multiple Security Vulnerabilities

Opera Web Browser is prone to multiple security vulnerabilities.

Exploiting these issues can allow attackers to access cross-domain image information, carry out phishing attacks, and maliciously replace the contents of trusted frames on webpages.

Versions prior to Opera 9.5 are vulnerable.

Exploit / POC

Opera Web Browser 9.27 Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

Opera Web Browser 9.27 Multiple Security Vulnerabilities

Solution:
The vendor released Opera 9.5 to address these issues. Please see the references for more information.

Opera Software Opera Web Browser 9.22