Opera Web Browser 10.62 and prior Multiple Security Vulnerabilities

Bugtraq ID:	43607
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 30 2010 12:00AM
Updated:	Sep 30 2010 12:00AM
Credit:	Jordi Chancel
Vulnerable:	Opera Software Opera Web Browser 10.62 Opera Software Opera Web Browser 10.61 Opera Software Opera Web Browser 10.60 Opera Software Opera Web Browser 10.54 Opera Software Opera Web Browser 10.53 Opera Software Opera Web Browser 10.52 Opera Software Opera Web Browser 10.51 Opera Software Opera Web Browser 10.50 Opera Software Opera Web Browser 10.10 Opera Software Opera Web Browser 10.1 Opera Software Opera Web Browser 10.01 Opera Software Opera Web Browser 10
Not Vulnerable:

Opera Web Browser 10.62 and prior Multiple Security Vulnerabilities

Opera web browser is prone to a cross-domain scripting vulnerability and an address bar URI-spoofing vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to display arbitrary content with a spoofed URI and perform phishing attacks or to bypass the same-origin protection and obtain potentially sensitive information. Other attacks are also possible.

Opera 10.62 and prior are vulnerable.

Opera Web Browser 10.62 and prior Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Opera Web Browser 10.62 and prior Multiple Security Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Opera Web Browser 10.62 and prior Multiple Security Vulnerabilities

References:

• Opera Homepage (Opera Software)