Opera Software Fixes Two Security Vulnerabilities In Opera 9.60

October 9th, 2008

Opera Software Fixes Two Security Vulnerabilities In Opera 9.60

Opera Software has released Opera version 9.60 to address two vulnerabilities. The first vulnerability is due to improper validation of URLs. Exploitation of this vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition. If a malicious page redirects Opera to a specially crafted address (URL), it can cause Opera to crash. Given sufficient address content, the crash could cause execution of code controlled by the attacking page.

The second vulnerability is due to unsafe storage of cached Java applets. Once a Java applet has been cached, if a page can predict the cache path for that applet, it can load the applet from the cache, causing it to run in the context of the local machine. This allows it to read other cache files on the computer or perform other normally more restrictive actions. These files could contain sensitive information, which could then be sent to the attacker.

Opera users should review Opera Advisory and upgrade to version 9.60 as soon as possible.

Share this item with others:

More on CyberInsecure:

Extremely Severe Vulnerabilities Patched In Opera Browser

Two Severe Flaws In Opera Browser

Critical Flaws Patched In Opera 9.61, New Zero-day Vulnerability Remains Unpatched

7 Vulnerabilities, Some Are Extremely Severe, Patched In New Opera 9.52

Opera Software Patches Vulnerabilities In Opera 9.64 And Adds Anti-exploitation Mechanisms

Posted in Scams, Vulnerabilities |

Print This Post

This entry was posted on Thursday, October 9th, 2008 at 8:05 am and is filed under Scams, Vulnerabilities. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Comments with unsolicited links to other resources will be marked as spam. DO NOT leave links in comments. Please leave your real email, it wont be published.