Skip to main content

Opera Multiple Vulnerabilities

Last Update Date: 26 Jan 2012 11:13 Release Date: 26 Jan 2012 5350 Views

RISK: Medium Risk

TYPE: Clients - Browsers

TYPE: Browsers

Multiple vulnerabilities have been identified in Opera, which can be exploited to cause cross-site scripting and security bypass.

  1. Scripting code can manipulate framed content to bypass the same-origin policy controls. A remote user can cause arbitrary scripting code to be executed by the target user's browser.
  2. A remote user can create specially crafted HTML that, when loaded by the target user, will determine if specified files can exist on the target user's system.

 


Impact

  • Cross-Site Scripting
  • Security Restriction Bypass

System / Technologies affected

  • Opera versions prior to 11.61

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • Update to version 11.61.

Vulnerability Identifier

  • No CVE information is available

Source


Related Link