Detections
Analytics
GLSA-200502-17 : Opera: Multiple vulnerabilities
high Nessus Plugin ID 16458
Synopsis
The remote Gentoo host is missing one or more security-related patches.Description
The remote host is affected by the vulnerability described in GLSA-200502-17 (Opera: Multiple vulnerabilities)Opera contains several vulnerabilities:
fails to properly validate Content-Type and filename.
fails to properly validate date: URIs.
uses kfmclient exec as the Default Application to handle downloaded files when integrated with KDE.
fails to properly control frames.
uses Sun Java packages insecurely.
searches an insecure path for plugins.
Impact :
An attacker could exploit these vulnerabilities to:
execute arbitrary code.
load a malicious frame in the context of another browser session.
leak information.
Workaround :
There is no known workaround at this time.
Solution
All Opera users should upgrade to the latest version:# emerge --sync # emerge --ask --oneshot --verbose '>=www-client/opera-7.54-r3'
See Also
Plugin Details
Severity: High
ID: 16458
File Name: gentoo_GLSA-200502-17.nasl
Version: 1.18
Type: local
Family: Gentoo Local Security Checks
Published: 2/15/2005
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/o:gentoo:linux, p-cpe:/a:gentoo:linux:opera
Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list
Patch Publication Date: 2/14/2005
Reference Information
CVE: CVE-2004-1157, CVE-2004-1489, CVE-2004-1490, CVE-2004-1491, CVE-2005-0456, CVE-2005-0457
GLSA: 200502-17