Opera < 9.62 Multiple Vulnerabilities

high Nessus Plugin ID 34680

Synopsis

The remote host contains a web browser that is affected by several issues.

Description

The version of Opera installed on the remote host is earlier than 9.62 and thus reportedly affected by several issues :

- Opera fails to sanitize certain parameters passed to the 'History Search' (906).

- The browser's same-origin policy may be violated because scripts running in the 'Links Panel' always run in the outermost frame of the page (907).

Successful exploitation would result in the attacker being able to execute arbitrary script code in the unsuspecting user's browser and may also lead to cookie-based credential theft, browser setting modifications, and other attacks.

These attacks require that the attacker be able to trick a user into browsing to a malicious URI with the affected application.

Solution

Upgrade to Opera 9.62 or later.

Plugin Details

Severity: High

ID: 34680

File Name: opera_962.nasl

Version: 1.14

Type: local

Agent: windows

Family: Windows

Published: 10/31/2008

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 7.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:opera:opera_browser

Required KB Items: SMB/Opera/Version

Exploit Available: true

Exploit Ease: Exploits are available

Exploitable With

Metasploit (Opera historysearch XSS)

Reference Information

CVE: CVE-2008-4794, CVE-2008-4795

BID: 31991

CWE: 20, 79

Detections

Analytics