Detections
Analytics
Opera < 9.10 Multiple Vulnerabilities
high Log Correlation Engine Plugin ID 800823
Synopsis
The remote host is vulnerable to multiple attack vectors.Description
The version of Opera installed on the remote host reportedly contains a heap overflow vulnerability that can be triggered when processing the DHT marker in a specially-crafted JPEG image to crash the browser or possibly allow execution of arbitrary code on the affected host. In addition, another flaw in Opera's createSVGTransformFromMatrix object typecasting may lead to a browser crash or arbitrary code execution if support for Javascript is enabled.Solution
Upgrade to version 9.10 or higher.See Also
labs.idefense.com/intelligence/vulnerabilities/display.php?id=458
labs.idefense.com/intelligence/vulnerabilities/display.php?id=457
http://.securityfocus.com/archive/1/456053
http://.securityfocus.com/archive/1/456066
Plugin Details
Severity: High
ID: 800823
Family: Web Clients
Nessus ID: 23977
Reference Information
CVE: CVE-2006-4819