Opera Multiple Vulnerabilities - June12 (Mac OS X)

  1. Network Vulnerabilities
  2. General
  3. Opera Multiple Vulnerabilities - June12 (Mac OS X)
Summary
The host is installed with Opera and is prone to multiple vulnerabilities.
Impact
Successful exploitation will allow remote attackers to execute arbitrary script code, disclose sensitive information or spoof the originating URL of a trusted web site and carry out phishing-style attacks. Impact Level: System/Application
Solution
Upgrade to Opera version 11.65 or 12 or later, For updates refer to http://www.opera.com/
Insight
- An error when displaying preferences within a small window can be exploited to execute arbitrary code by tricking a user into entering a specific keyboard sequence. - An error when displaying pop-up windows can be exploited to execute script code by tricking a user into following a specific sequence of events. - An error when handling JSON resources can be exploited to bypass the cross domain policy restriction and disclose certain information to other sites. - An unspecified error can be exploited to display arbitrary content while showing the URL of a trusted web site in the address bar. - An error when handling page loads can be exploited to display arbitrary content while showing the URL of a trusted web site in the address.
Affected
Opera version prior to 11.65 on Mac OS X
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities