Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption.

The remote host is affected by the vulnerability described in GLSA-200804-14 (Opera: Multiple vulnerabilities)

    Michal Zalewski reported two vulnerabilities, memory corruption when     adding news feed sources from a website (CVE-2008-1761) as well as when     processing HTML CANVAS elements to use scaled images (CVE-2008-1762).
    Additionally, an unspecified weakness related to keyboard handling of     password inputs has been reported (CVE-2008-1764).
  Impact :

    A remote attacker could entice a user to visit a specially crafted web     site or news feed and possibly execute arbitrary code with the     privileges of the user running Opera.
  Workaround :

    There is no known workaround at this time.

Opera Software reports of multiple security issues in Opera. All of them can lead to arbitrary code execution. Details are as the following :

- Newsfeed prompt can cause Opera to execute arbitrary code

- Resized canvas patterns can cause Opera to execute arbitrary code

The version of Opera installed on the remote host reportedly is affected by several issues :

  - Resized canvas patterns can lead to a program crash with possible memory corruption.
  - A newsfeed prompt can cause Opera to execute arbitrary code.
  - Improved keyboard handling of password inputs.

The version of Opera installed on the remote host reportedly is affected by several issues :

  - Resized canvas patterns can lead to a program crash with     possible memory corruption.

  - A newsfeed prompt can cause Opera to execute arbitrary     code.

  - Improved keyboard handling of password inputs.

ID	Name	Product	Family	Severity
31961	GLSA-200804-14 : Opera: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
31831	FreeBSD : opera -- multiple vulnerabilities (ad4a00fa-0157-11dd-8bd3-001372ae3ab9)	Nessus	FreeBSD Local Security Checks	high
4457	Opera < 9.27 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
31734	Opera < 9.27 Multiple Vulnerabilities	Nessus	Windows	high
800810	Opera < 9.27 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2008-1762

high

Tenable Plugins

high

high

medium

high

high