Opera Web Browser prior to 9.63 Multiple Security Vulnerabilities
BID:32864
Info
Opera Web Browser prior to 9.63 Multiple Security Vulnerabilities
| Bugtraq ID: | 32864 |
| Class: | Unknown |
| CVE: |
CVE-2008-5680 CVE-2008-5681 CVE-2008-5682 CVE-2008-5683 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2008 12:00AM |
| Updated: | Mar 17 2009 01:06PM |
| Credit: | Red XIII, Vitaly McLain, David Bloom and Robert Swiecki of the Google Security Team |
| Vulnerable: |
S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 Opera Software Opera Web Browser 9.62 Opera Software Opera Web Browser 9.61 Opera Software Opera Web Browser 9.60 beta 1 Opera Software Opera Web Browser 9.60 Opera Software Opera Web Browser 9.52 Opera Software Opera Web Browser 9.51 Opera Software Opera Web Browser 9.50 beta Opera Software Opera Web Browser 9.5 Opera Software Opera Web Browser 9.27 Opera Software Opera Web Browser 9.26 Opera Software Opera Web Browser 9.25 Opera Software Opera Web Browser 9.24 Opera Software Opera Web Browser 9.23 Opera Software Opera Web Browser 9.22 Opera Software Opera Web Browser 9.21 Opera Software Opera Web Browser 9.20 beta 1 Opera Software Opera Web Browser 9.20 Opera Software Opera Web Browser 9.10 Opera Software Opera Web Browser 9.02 Opera Software Opera Web Browser 9.01 Opera Software Opera Web Browser 9 Gentoo Linux |
| Not Vulnerable: |
Opera Software Opera Web Browser 9.63 |
Discussion
Opera Web Browser prior to 9.63 Multiple Security Vulnerabilities
Opera Web Browser is prone to multiple security vulnerabilities.
Successful exploits may allow attackers to:
- execute arbitrary code in the context of the application
- cause denial-of-service conditions
- execute arbitrary script code in the browser of an unsuspecting user in the context of certain sites
- steal cookie-based authentication credentials
- obtain sensitive information
- carry out other attacks
Versions prior to Opera 9.63 are vulnerable.
Opera Web Browser is prone to multiple security vulnerabilities.
Successful exploits may allow attackers to:
- execute arbitrary code in the context of the application
- cause denial-of-service conditions
- execute arbitrary script code in the browser of an unsuspecting user in the context of certain sites
- steal cookie-based authentication credentials
- obtain sensitive information
- carry out other attacks
Versions prior to Opera 9.63 are vulnerable.
Exploit / POC
Opera Web Browser prior to 9.63 Multiple Security Vulnerabilities
Note that some of the issues may not require any exploit code and may be trivial to exploit using standard tools.
Note that some of the issues may not require any exploit code and may be trivial to exploit using standard tools.
Solution / Fix
Opera Web Browser prior to 9.63 Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Opera Software Opera Web Browser 9.51
Opera Software Opera Web Browser 9.60
Opera Software Opera Web Browser 9.50 beta
Opera Software Opera Web Browser 9.20 beta 1
Opera Software Opera Web Browser 9.25
Opera Software Opera Web Browser 9.27
Opera Software Opera Web Browser 9.23
Opera Software Opera Web Browser 9
Opera Software Opera Web Browser 9.61
Opera Software Opera Web Browser 9.26
Opera Software Opera Web Browser 9.60 beta 1
Opera Software Opera Web Browser 9.20
Opera Software Opera Web Browser 9.62
Opera Software Opera Web Browser 9.22
Opera Software Opera Web Browser 9.24
Opera Software Opera Web Browser 9.02
Opera Software Opera Web Browser 9.01
Opera Software Opera Web Browser 9.5
Opera Software Opera Web Browser 9.10
Opera Software Opera Web Browser 9.21
Opera Software Opera Web Browser 9.52
Solution:
Updates are available. Please see the references for more information.
Opera Software Opera Web Browser 9.51
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.60
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.50 beta
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.20 beta 1
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.25
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.27
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.23
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.61
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.26
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.60 beta 1
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.20
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.62
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.22
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.24
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.02
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.01
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.5
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.10
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.21
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
Opera Software Opera Web Browser 9.52
-
Opera Software Opera Download
http://www.opera.com/download/?custom=yes
References
Opera Web Browser prior to 9.63 Multiple Security Vulnerabilities
References:
References:
- Opera Homepage (Opera Software)
- Security changes since Opera 9.62 (Opera Software)
- Advisory: Built-in XSLT templates can allow cross-site scripting (Opera Software)
- Advisory: Manipulating text input contents can allow execution of arbitrary code (Opera Software)
- Advisory: Script injection in feed preview can reveal contents of unrelated news (Opera Software)