Opera Web Browser prior to 10 Multiple Security Vulnerabilities

Bugtraq ID:	36202
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 01 2009 12:00AM
Updated:	Sep 01 2009 04:22PM
Credit:	Chris Weber of Casaba Security, Dan Kaminsky
Vulnerable:	Opera Software Opera Web Browser 9.64 Opera Software Opera Web Browser 9.63 Opera Software Opera Web Browser 9.62 Opera Software Opera Web Browser 9.61 Opera Software Opera Web Browser 9.60 beta 1 Opera Software Opera Web Browser 9.60 Opera Software Opera Web Browser 9.52 Opera Software Opera Web Browser 9.51 Opera Software Opera Web Browser 9.50 beta Opera Software Opera Web Browser 9.5 Opera Software Opera Web Browser 9.27 Opera Software Opera Web Browser 9.26 Opera Software Opera Web Browser 9.25 Opera Software Opera Web Browser 9.24 Opera Software Opera Web Browser 9.23 Opera Software Opera Web Browser 9.22 Opera Software Opera Web Browser 9.21 Opera Software Opera Web Browser 9.20 beta 1 Opera Software Opera Web Browser 9.20 Opera Software Opera Web Browser 9.10 Opera Software Opera Web Browser 9.02 Opera Software Opera Web Browser 9.01 Opera Software Opera Web Browser 9
Not Vulnerable:	Opera Software Opera Web Browser 10

Opera Web Browser prior to 10 Multiple Security Vulnerabilities

Opera Web Browser is prone to multiple security vulnerabilities.

Successful exploits may allow attackers to perform spoofing and man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.

Versions prior to Opera 10 are vulnerable.

Opera Web Browser prior to 10 Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Note that some of the issues may not require any exploit code and may be trivial to exploit via standard tools.

Opera Web Browser prior to 10 Multiple Security Vulnerabilities

Solution:
The vendor has released updates. Please see the references for details.

Opera Web Browser prior to 10 Multiple Security Vulnerabilities

References:

• Opera 10 for Windows changelog (Opera Software)
  
• Opera Homepage (Opera Software)
  
• Advisory: Address bar is not always updated correctly when collapsed (Opera Software)
  
• Advisory: Opera accepts nulls and invalid wildcards in certificates (Opera Software)
  
• Advisory: Opera may show some incorrect characters in the address bar (Opera Software)
  
• Advisory: Sites using revoked intermediate certificates might be shown as secure (Opera)