Opera Multiple Vulnerabilities

[TCH-Thomas]

From: Secunia

secunia.com/advisories/28169/

 

Rating: Highly critical

 

Description:

Some vulnerabilities have been reported in Opera, which can be exploited by malicious people to bypass certain security restrictions, disclose sensitive information, and compromise a user's system.

 

1) An unspecified error can be exploited via certain plugins to conduct cross-domain scripting attacks.

 

2) An unspecified error within the processing of TLS certificates can be exploited to execute arbitrary code.

 

3) An unspecified error within Rich text editing when using designMode can be exploited to conduct cross-domain scripting attacks.

 

4) An unspecified error within the processing of bitmaps can be exploited to disclose the contents of random memory areas.

 

The vulnerabilities are reported in versions prior to 9.25.

 

Solution:

Update to version 9.25.

opera.com/download/

[TCH-Bruce]

Thanks Thomas

[TCH-Carl]

Thanks Thomas.