Home→Descriptions→SA30937
| Secunia ID | |
| CVE-ID | |
| Release Date |
03 Jul 2008 |
| Last Change |
20 Aug 2008 |
| Criticality | |
| Solution Status |
Vendor Patch |
| Software |
Opera 5.x |
| Where | |
| Impact |
System accessThis covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user. |
| Description |
A vulnerability has been reported in Opera, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error in the processing of command line parameters received when the application is registered as a protocol handler. This can be exploited to execute arbitrary code by tricking the user into clicking a specially crafted, incorrectly encoded URL. The vulnerability is reported in versions prior to 9.51. |
| Solution |
Update to version 9.51. |
| Reported by |
The vendor credits Billy Rios. |
| Original Advisory |
Opera: |