Internet threat level: 1
Home→Descriptions→SA48535
Opera Multiple Vulnerabilities
| Secunia ID | |
| CVE-ID |
CVE-2012-1924, CVE-2012-1925, CVE-2012-1926, CVE-2012-1927, CVE-2012-1928, CVE-2012-1929, CVE-2012-1930, CVE-2012-1931 |
| Release Date |
27 Mar 2012 |
| Last Change |
30 Mar 2012 |
| Criticality | |
| Solution Status |
Vendor Patch |
| Software |
Opera 11.x |
| Where | |
| Impact |
System accessThis covers vulnerabilities where malicious people are able to gain system access and execute arbitrary code with the privileges of a local user. Exposure of sensitive informationVulnerabilities where documents or credentials are leaked or can be revealed either locally or from remote. Manipulation of dataThis includes vulnerabilities where a user or a remote attacker can manipulate local data on a system, but not necessarily be able to gain escalated privileges or system access. The most frequent type of vulnerabilities with this impact are SQL-injection vulnerabilities, where a malicious user or person can manipulate SQL queries. Security BypassThis covers vulnerabilities or security issues where malicious users or people can bypass certain security mechanisms of the application. The actual impact varies significantly depending on the design and purpose of the affected application. SpoofingThis covers various vulnerabilities where it is possible for malicious users or people to impersonate other users or systems. |
| Description |
Two security issue and multiple vulnerabilities have been reported in Opera, which can be exploited by malicious, local users to disclose potentially sensitive information and manipulate certain data and by malicious people to conduct spoofing attacks, bypass certain security restrictions, and potentially compromise a user's system. 1) An error when displaying the download dialog box within a small window can be exploited to download and execute a file by tricking a user into entering a specific keyboard sequence. 2) An error when displaying the download dialog box can be exploited to overlay the box with other content subsequently tricking a user into downloading and executing a file. 3) An error when handling history.state of sites implementing history.pushState and history.replaceState can be exploited to bypass the cross-domain policy restriction and disclose certain information to other sites. 4) An error when displaying certain dialogs can be exploited to display arbitrary content while showing the URL of a trusted web site in the address bar. 5) An error when handling redirects to a slowly responding, trusted site can be exploited to display arbitrary content while showing the URL of a trusted web site in the address bar. 6) An error related to the creation of a temporary file when printing a document using certain printing frameworks can be exploited to corrupt files via symlink attacks. 7) An error due to incorrect permissions of a temporary file when printing can be exploited to disclose the content of the printed documents. Note: The vulnerabilities #6 and #7 only affect Opera for UNIX. 8) An error when displaying certain styles can be exploited to overlay the address bar. Note: This vulnerability only affects Opera for Mac. The vulnerabilities are reported in versions prior to 11.62. |
| Solution |
Update to version 11.62. |
| Reported by |
1, 2, 5) The vendor credits Jordi Chancel. |
| Original Advisory |
Opera: |
© 1997-2013 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.
The authors' opinions do not necessarily reflect the official positions of Kaspersky Lab.