RSS   Podatności dla 'Opera web browser'   RSS

2009-10-30
 
CVE-2009-3832

CWE-20
 
 
Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site.

 
 
CVE-2009-3831

CWE-94
 
 
Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted domain name.

 
2009-03-16
 
CVE-2009-0916

 
 
Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe issue."

 
 
CVE-2009-0915

CWE-Other
 
 
Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to plug-ins.

 
 
CVE-2009-0914

 
 
Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption.

 
2007-10-08
 
CVE-2007-5276

CWE-DesignError
 
 
Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers to conduct DNS rebinding attacks, as demonstrated by a port 81 URL in an IMG SRC, when the DNS pin had been established for a session on port 80.

 
2007-08-15
 
CVE-2007-4367

 
 
Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."

 
2007-07-20
 
CVE-2007-3929

CWE-119
 
 
Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object.

 
2007-05-22
 
CVE-2007-2809

 
 
Buffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted torrent file. NOTE: due to the lack of details, it is not clear if this is the same issue as CVE-2007-2274.

 
2006-07-31
 
CVE-2006-3945

 
 
The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background property of a DHTML element to a long http or https URL, which triggers memory corruption.

 

Copyright 2024, cxsecurity.com

 

Back to Top