Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors in which Opera is launched by other applications.

The version of Opera installed on the remote host is older than 9.52 and is reportedly affected by several issues :

  - Specially-crafted URLs could start Opera in a way that would allow execution of arbitrary code.
  - Invalid checking of what frames a site can change, allowing a website to open pages from other sites.
  - An unspecified cross-site scripting issue.
  - Custom shortcuts and menu commands may pass parameters created from uninitialized memory.
  - Secure sites loading insecure content in a frame will cause Opera to incorrectly display the padlock icon.
  - Feed sources can link to a user's local disk, and appropriate JavaScript can detect if these files exist or not.
  - The page address may be changed when a user subscribes to a newsfeed subscription using the feed subscription button.

The version of Opera installed on the remote host is earlier than 9.52 and thus reportedly affected by several issues :

  - Specially crafted URLs could start Opera in a way that     would allow execution of arbitrary code.

  - Invalid checking of what frames a site can change,     allowing a website to open pages from other sites.

  - An unspecified cross-site scripting issue.

  - Custom shortcuts and menu commands may pass parameters     created from uninitialized memory.

  - Secure sites loading insecure content in a frame will     cause Opera to incorrectly display the padlock icon.

  - Feed sources can link to a user's local disk, and     appropriate JavaScript can detect if these files exist     or not.

  - The page address may be changed when a user subscribes     to a newsfeed subscription using the feed subscription     button.

ID	Name	Product	Family	Severity
4634	Opera < 9.52 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
33949	Opera < 9.52 Multiple Vulnerabilities	Nessus	Windows	high
800814	Opera < 9.52 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2008-4293

critical

Tenable Plugins

medium

high

high