Detections
Analytics
GLSA-200701-08 : Opera: Two remote code execution vulnerabilities
high Nessus Plugin ID 24206
Synopsis
The remote Gentoo host is missing one or more security-related patches.Description
The remote host is affected by the vulnerability described in GLSA-200701-08 (Opera: Two remote code execution vulnerabilities)Christoph Deal discovered that JPEG files with a specially crafted DHT marker can be exploited to cause a heap overflow. Furthermore, an anonymous person discovered that Opera does not correctly handle objects passed to the 'createSVGTransformFromMatrix()' function.
Impact :
An attacker could potentially exploit the vulnerabilities to execute arbitrary code with the privileges of the user running Opera by enticing a victim to open a specially crafted JPEG file or a website containing malicious JavaScript code.
Workaround :
The vendor recommends disabling JavaScript to avoid the 'createSVGTransformFromMatrix' vulnerability. There is no known workaround for the other vulnerability.
Solution
All Opera users should update to the latest version:# emerge --sync # emerge --ask --oneshot --verbose '>=www-client/opera-9.10'
See Also
http://www.nessus.org/u?460cd1d1
Plugin Details
Severity: High
ID: 24206
File Name: gentoo_GLSA-200701-08.nasl
Version: 1.18
Type: local
Family: Gentoo Local Security Checks
Published: 1/17/2007
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:gentoo:linux:opera, cpe:/o:gentoo:linux
Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list
Patch Publication Date: 1/12/2007
Reference Information
CVE: CVE-2007-0126, CVE-2007-0127