Opera Skin Zip File Buffer Overflow Vulnerability

Bugtraq ID:	9089
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 22 2003 12:00AM
Updated:	Nov 22 2003 12:00AM
Credit:	Discovery credited to Jouko Pynnonen.
Vulnerable:	Opera Software Opera Web Browser 7.22
Not Vulnerable:	Opera Software Opera Web Browser 7.23

Opera Skin Zip File Buffer Overflow Vulnerability

A problem has been identified in the handling of zipped skin files by Opera. Because of this, it may be possible for an attacker to gain unauthorized access to a system using the vulnerable browser.

Opera Skin Zip File Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Opera Skin Zip File Buffer Overflow Vulnerability

Solution:
Opera have released Opera Web Browser version 7.23 to resolve this issue.


Opera Software Opera Web Browser 7.22

• Opera Software Opera 7.23 for Windows
  http://www.opera.com/download/

Opera Skin Zip File Buffer Overflow Vulnerability

References:

• Changelog for Opera 7.23 for Windows (Opera Software)
  
• Opera Web Browser Home Page (Opera Software)
  
• Opera directory traversal and buffer overflow (Jouko Pynnonen )