Detections
Analytics
Opera < 10.10 Multiple Vulnerabilities
high Nessus Plugin ID 42892
Synopsis
The remote host contains a web browser that is affected by multiple issues.Description
The version of Opera installed on the remote host is earlier than 10.10. Such versions are potentially affected by multiple issues :- Error messages can leak onto unrelated sites which could lead to cross-site scripting attacks. (941)
- Passing very long strings through the string to number conversion using JavaScript in Opera may result in heap buffer overflows. (942)
- There is an as-yet unspecified moderately severe issue reported by Chris Evans of the Google Security Team.
Solution
Upgrade to Opera 10.10 or later.See Also
http://www.opera.com/support/kb/view/941/
http://www.opera.com/support/kb/view/942/
http://web.archive.org/web/20170921232308/http://www.opera.com:80/docs/changelogs/windows/1010/
https://www.securityfocus.com/archive/1/507980/30/0/threaded
Plugin Details
Severity: High
ID: 42892
File Name: opera_1010.nasl
Version: 1.11
Type: local
Agent: windows
Family: Windows
Published: 11/25/2009
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:opera:opera_browser
Required KB Items: SMB/Opera/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 11/23/2009
Vulnerability Publication Date: 11/20/2009