Opera before 9.26 allows remote attackers to misrepresent web page addresses using "certain characters" that "cause the page address text to be misplaced."

This patch brings Opera to security update level 9.50

Following security problems were fixed: CVE-2008-2714: Opera before 9.26 allows remote attackers to misrepresent web page addresses using 'certain characters' that 'cause the page address text to be misplaced.'

CVE-2008-2715: Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS elements that use the images as patterns.

CVE-2008-2716: Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks.

It also contains lots of new features and other bugfixes, see the Changelog at: http://www.opera.com/docs/changelogs/linux/950/

The version of Opera installed on the remote host reportedly is affected by several issues :

  - Improper handling of special characters in page addresses     can make addresses look like other ones, aiding in phishing attacks.
    
  - Specially crafted HTML canvas elements could violate the     same-origin image policy.
    
  - Framed sources contained on the same parent page can modify     each other's location.

 The version of Opera installed on the remote host reportedly is affected by several issues :

  - Improper handling of special characters in page addresses can make addresses look like other ones, aiding in phishing attacks.
  - Specially-crafted HTML canvas elements could violate the same-origin image policy.
  - Framed sources contained on the same parent page can modify each other's location.

ID	Name	Product	Family	Severity
40088	openSUSE Security Update : opera (opera-43)	Nessus	SuSE Local Security Checks	medium
33224	openSUSE 10 Security Update : opera (opera-5354)	Nessus	SuSE Local Security Checks	medium
33168	Opera < 9.50 Multiple Vulnerabilities	Nessus	Windows	medium
4541	Opera < 9.50 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
800808	Opera < 9.50 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	medium

Detections

Analytics

CVE-2008-2714

medium

Tenable Plugins

medium

medium

medium

medium

medium