Opera Multiple Vulnerabilities-03 Jan13 (Mac OS X)

  1. Network Vulnerabilities
  2. General
  3. Opera Multiple Vulnerabilities-03 Jan13 (Mac OS X)
Summary
The host is installed with Opera and is prone to multiple vulnerabilities.
Impact
Successful exploitation will let the attacker crash the browser leading to denial of service, execute the arbitrary code or disclose the information. Impact Level: System/Application
Solution
Upgrade to Opera version 12.10 or later, For updates refer to http://www.opera.com/
Insight
- Internet shortcuts used for phishing in '<img>' elements. - Specially crafted WebP images can be used to disclose random chunks of memory. - Specially crafted SVG images can allow execution of arbitrary code. - Cross domain access to object constructors can be used to facilitate cross-site scripting. - Data URIs can be used to facilitate Cross-Site Scripting. - CORS requests can incorrectly retrieve contents of cross origin pages. - Certificate revocation service failure may cause Opera to show an unverified site as secur.
Affected
Opera version before 12.10 on Mac OS X
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities