BID:33961

Opera Web Browser prior to 9.64 Multiple Security Vulnerabilities

Info

Opera Web Browser prior to 9.64 Multiple Security Vulnerabilities

Bugtraq ID:	33961
Class:	Unknown
CVE:	CVE-2009-0914 CVE-2009-0915 CVE-2009-0916
Remote:	Yes
Local:	No
Published:	Mar 03 2009 12:00AM
Updated:	Mar 24 2009 06:06PM
Credit:	Tavis Ormandy of the Google Security Team, Adam Barth, Opera
Vulnerable:	Opera Software Opera Web Browser 9.63 Opera Software Opera Web Browser 9.62 Opera Software Opera Web Browser 9.61 Opera Software Opera Web Browser 9.60 beta 1 Opera Software Opera Web Browser 9.60 Opera Software Opera Web Browser 9.52 Opera Software Opera Web Browser 9.51 Opera Software Opera Web Browser 9.50 beta Opera Software Opera Web Browser 9.5 Opera Software Opera Web Browser 9.27 Opera Software Opera Web Browser 9.26 Opera Software Opera Web Browser 9.25 Opera Software Opera Web Browser 9.24 Opera Software Opera Web Browser 9.23 Opera Software Opera Web Browser 9.22 Opera Software Opera Web Browser 9.21 Opera Software Opera Web Browser 9.20 beta 1 Opera Software Opera Web Browser 9.20 Opera Software Opera Web Browser 9.10 Opera Software Opera Web Browser 9.02 Opera Software Opera Web Browser 9.01 Opera Software Opera Web Browser 9

Not Vulnerable:	Opera Software Opera Web Browser 9.64

Discussion

Opera Web Browser prior to 9.64 Multiple Security Vulnerabilities

Opera Web Browser is prone to multiple security vulnerabilities.

Successful exploits may allow attackers to:
- execute arbitrary code in the context of the application
- execute arbitrary script code in the browser of an unsuspecting user in the context of certain sites
- cause denial-of-service conditions
- steal cookie-based authentication credentials
- obtain sensitive information
- carry out other attacks

Versions prior to Opera 9.64 are vulnerable.

Exploit / POC

Opera Web Browser prior to 9.64 Multiple Security Vulnerabilities

Note that some of the issues may not require any exploit code and may be trivial to exploit via standard tools.

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

Opera Web Browser prior to 9.64 Multiple Security Vulnerabilities

Solution:
The vendor has released updates. Please see the references for more information.

Opera Software Opera Web Browser 9.51