Unspecified vulnerability in Opera before 9.24, when using an "external" newsgroup or e-mail client, allows remote attackers to execute arbitrary commands via unknown vectors.

The remote host is affected by the vulnerability described in GLSA-200710-31 (Opera: Multiple vulnerabilities)

    Michael A. Puls II discovered an unspecified flaw when launching     external email or newsgroup clients (CVE-2007-5541). David Bloom     discovered that when displaying frames from different websites, the     same-origin policy is not correctly enforced (CVE-2007-5540).
  Impact :

    An attacker could potentially exploit the first vulnerability to     execute arbitrary code with the privileges of the user running Opera by     enticing a user to visit a specially crafted URL. Note that this     vulnerability requires an external e-mail or newsgroup client     configured in Opera to be exploitable. The second vulnerability allows     an attacker to execute arbitrary script code in a user's browser     session in context of other sites or the theft of browser credentials.
  Workaround :

    There is no known workaround at this time for all these     vulnerabilities.

An advisory from Opera reports :

If a user has configured Opera to use an external newsgroup client or e-mail application, specially crafted Web pages can cause Opera to run that application incorrectly. In some cases this can lead to execution of arbitrary code.

When accessing frames from different Websites, specially crafted scripts can bypass the same-origin policy, and overwrite functions from those frames. If scripts on the page then run those functions, this can cause the script of the attacker's choice to run in the context of the target Website.

This version update of Opera to 9.24 fixes numerous defects including some security problems. (CVE-2007-5540,CVE-2007-5541)

The version of Opera installed on the remote host reportedly may allow for arbitrary code execution if it has been configured to use an external news reader or email client and a user views a specially-crafted web page.  In addition, it may also allow a script to bypass the same-origin policy and overwrite functions on pages from other domains when processing frames from different web sites, which can be leveraged to conduct cross-site scripting attacks.

The version of Opera installed on the remote host reportedly may allow for arbitrary code execution if it has been configured to use an external news reader or email client and a user views a specially crafted web page. 

In addition, it may also allow a script to bypass the same-origin policy and overwrite functions on pages from other domains when processing frames from different websites, which can be leveraged to conduct cross-site scripting attacks.

ID	Name	Product	Family	Severity
27593	GLSA-200710-31 : Opera: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
27578	FreeBSD : opera -- multiple vulnerabilities (44224e08-8306-11dc-9283-0016179b2dd5)	Nessus	FreeBSD Local Security Checks	high
27533	openSUSE 10 Security Update : opera (opera-4575)	Nessus	SuSE Local Security Checks	high
4249	Opera < 9.24 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
27506	Opera < 9.24 Multiple Vulnerabilities	Nessus	Windows	high
800827	Opera < 9.24 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2007-5541

critical

Tenable Plugins

high

high

high

medium

high

high