CERT-In Advisory CIAD-2008-54
Opera Web Browser Multiple Vulnerabilities
Original issue date:
October 24, 2008
Severity Rating: High
Systems Affected
- Opera versions prior to 9.61
Overview
Multiple vulnerabilities have been reported in Opera, which can be exploited by malicious people to conduct script insertion attacks, to bypass certain security restrictions, disclose potentially sensitive information, or potentially to compromise a vulnerable system.
Description
1. Opera History Search cross-site scripting vulnerability
(CVE-2008-4696)
Certain parts of the URL of visited pages are not properly sanitized by the "History Search" functionality before being used. This can be exploited to inject arbitrary HTML and script code, which is executed in a user's browser session when the malicious data is being viewed, leading to disclosure of previously visited pages.
2. Opera Fast Forward cross-site scripting vulnerability
(CVE-2008-4697)
An error in the implementation of the "Fast Forward" feature can be exploited to execute arbitrary script code in the context of a restricted frame via a specially crafted JavaScript URL. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
3. Opera news feed weak security vulnerability
(CVE-2008-4698)
An error exists while blocking scripts during a news feed preview. By persuading a victim to view a specially-crafted news feed, a remote attacker could exploit this vulnerability either to subscribe the victim to arbitrary news feeds, or to view the contents of feeds to which the victim is currently subscribed .
Solution
Upgrade to Opera version 9.61
http://www.opera.com/download/
Vendor Information
Opera
http://www.opera.com/support/search/view/903/
http://www.opera.com/support/search/view/904/
http://www.opera.com/support/search/view/905/
References
SecurityFocus
http://www.securityfocus.com/bid/31842
ISS XForce
http://xforce.iss.net/xforce/xfdb/46003
http://xforce.iss.net/xforce/xfdb/46004
http://xforce.iss.net/xforce/xfdb/46005
Secunia
http://secunia.com/Advisories/32299/
CVE Name
CVE-2008-4696
CVE-2008-4697
CVE-2008-4698
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Contact Information
Phone: +91-11-24368572
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Communications and Information Technology
Electronics Niketan
6, C.G.O. Complex
New Delhi-110 003
|
