FreshPorts - VuXML

Opera reports:

Fixed a moderately severe issue, as reported by Attila Suszte.

< 12.15

< 12.15

< 12.15

< 12.15

Opera reports:

When loading GIF images into memory, Opera should allocate the correct amount of memory to store that image. Specially crafted image files can cause Opera to allocate the wrong amount of memory. Subsequent data may then overwrite unrelated memory with attacker-controlled data. This can lead to a crash, which may also execute that data as code.

< 12.12

< 12.12

< 12.12

< 12.12

Opera reports:

Particular DOM event manipulations can cause Opera to crash. In some cases, this crash might occur in a way that allows execution of arbitrary code. To inject code, additional techniques would have to be employed.

< 12.13

Opera reports:

Opera 11.01 is a recommended upgrade offering security and stability enhancements.

The following security vulnerabilities have been fixed:

• Removed support for "javascript:" URLs in CSS -o-link values, to make it easier for sites to filter untrusted CSS.
• Fixed an issue where large form inputs could allow execution of arbitrary code, as reported by Jordi Chancel; see our advisory.
• Fixed an issue which made it possible to carry out clickjacking attacks against internal opera: URLs; see our advisory.
• Fixed issues which allowed web pages to gain limited access to files on the user's computer; see our advisory.
• Fixed an issue where email passwords were not immediately deleted when deleting private data; see our advisory.

< 11.01

Opera Team reports:

• Fixed a heap buffer overflow in string to number conversion
• Fixed an issue where error messages could leak onto unrelated sites
• Fixed a moderately severe issue, as reported by Chris Evans of the Google Security Team; details will be disclosed at a later date.

< 10.10.20091120

< 10.10

Opera Team reports:

An unspecified error in the processing of JPEG images can be exploited to trigger a memory corruption.

An error can be exploited to execute arbitrary script code in a different domain via unspecified plugins.

An unspecified error has a "moderately severe" impact. No further information is available.

< 9.64

Opera Team Reports:

• Fixed an issue where certain domain names could allow execution of arbitrary code, as reported by Chris Weber of Casaba Security
• Fixed an issue where scripts can run on the feed subscription page, as reported by Inferno

< 10.01.20091019

< 10.01

Opera software reports:

• Fixed a moderately severe issue; details will be disclosed at a later date
• Fixed an issue that could allow pages to set cookies or communicate cross-site for some top level domains; see our advisory
• Improved handling of certificate revocation corner cases
• Added a fix for a weakness in the SSL v3.0 and TLS 1.0 specifications, as reported by Thai Duong and Juliano Rizzo; see our advisory
• Fixed an issue where the JavaScript "in" operator allowed leakage of cross-domain information, as reported by David Bloom; see our advisory

< 11.60

< 11.60,1

Opera reports:

When requesting pages using HTTP, Opera temporarily stores the response in a buffer. In some cases, Opera may incorrectly allocate too little space for a buffer, and may then store too much of the response in that buffer. This causes a buffer overflow, which in turn can lead to a memory corruption and crash. It is possible to use this crash to execute the overflowing data as code, which may be controlled by an attacking site.

< 12.11

< 12.11

< 12.11

< 12.11

Opera Team Reports:

• Issue where sites using revoked intermediate certificates might be shown as secure
• Issue where the collapsed address bar didn't show the current domain
• Issue where pages could trick users into uploading files
• Some IDNA characters not correctly displaying in the address bar
• Issue where Opera accepts nulls and invalid wild-cards in certificates

< 10.00.20090830

le 10.00.b3_1,1

< 10.00

Opera Software ASA reports:

Fixed an issue with framesets that could allow execution of arbitrary code, as reported by an anonymous contributor working with the SecuriTeam Secure Disclosure program.

< 11.11

< 11.11

< 11.11

The Opera Team reports:

Manipulating certain text-area contents can cause a buffer overflow, which may be exploited to execute arbitrary code.

Certain HTML constructs can cause the resulting DOM to change unexpectedly, which triggers a crash. To inject code, additional techniques will have to be employed.

Exceptionally long host names in file: URLs can cause a buffer overflow, which may be exploited to execute arbitrary code. Remote Web pages cannot refer to file: URLs, so successful exploitation involves tricking users into manually opening the exploit URL, or a local file that refers to it.

When Opera is previewing a news feed, some scripted URLs are not correctly blocked. These can execute scripts which are able to subscribe the user to any feed URL that the attacker chooses, and can also view the contents of any feeds that the user is subscribed to. These may contain sensitive information.

Built-in XSLT templates incorrectly handle escaped content and can cause it to be treated as markup. If a site accepts content from untrusted users, which it then displays using XSLT as escaped strings, this can allow scripted markup to be injected. The scripts will then be executed in the security context of that site.

< 9.63

Opera reports:

CORS (Cross-Origin Resource Sharing) allows web pages to retrieve the contents of pages from other sites, with their permission, as they would appear for the current user. When requests are made in this way, the browser should only allow the page content to be retrieved if the target site sends the correct headers that give permission for their contents to be used in this way. Specially crafted requests may trick Opera into thinking that the target site has given permission when it had not done so. This can result in the contents of any target page being revealed to untrusted sites, including any sensitive information or session IDs contained within the source of those pages.

Also reported are vulnerabilities involving SVG graphics and XSS.

< 12.10

< 12.10

< 12.10

< 12.10