Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read uninitialized memory contents by using JavaScript to read a canvas image.

Opera 9.51 was released as security and bugfix update.

Full details are on http://www.opera.com/docs/changelogs/linux/951/

CVE-2008-3078: Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read uninitialized memory contents by using JavaScript to read a canvas image.

The version of Opera installed on the remote host reportedly is affected by several issues :

  - Specially crafted HTML canvas elements could reveal data from     random areas of memory.

  - An unspecified arbitrary code execution vulnerability.

  - Improperly set security status when navigating from HTTP to     HTTPS.

The version of Opera installed on the remote host reportedly is affected by several issues :

  - Specially-crafted HTML canvas elements could reveal data from random areas of memory.
  - An unspecified arbitrary code execution vulnerability.
  - Improperly set security status when navigating from HTTP to HTTPS.

ID	Name	Product	Family	Severity
40089	openSUSE Security Update : opera (opera-116)	Nessus	SuSE Local Security Checks	high
33574	openSUSE 10 Security Update : opera (opera-5468)	Nessus	SuSE Local Security Checks	high
33396	Opera < 9.51 Multiple Vulnerabilities	Nessus	Windows	high
4572	Opera < 9.51 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
800817	Opera < 9.51 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2008-3078

high

Tenable Plugins

high

high

high

medium

high