Opera: Multiple vulnerabilities

1. Gentoo Linux Security Advisory

Advisory Reference	GLSA 200803-09 / opera
Release Date	March 04, 2008
Latest Revision	March 04, 2008: 01
Impact	normal
Exploitable	remote

Package	Vulnerable versions	Unaffected versions	Architecture(s)
www-client/opera	< 9.26	>= 9.26	All supported architectures

Related bugreports: #210260

Synopsis

Multiple vulnerabilities have been discovered in Opera, allowing for file disclosure, privilege escalation and Cross-Site scripting.

2. Impact Information

Background

Opera is a fast web browser that is available free of charge.

Description

Mozilla discovered that Opera does not handle input to file form fields properly, allowing scripts to manipulate the file path (CVE-2008-1080). Max Leonov found out that image comments might be treated as scripts, and run within the wrong security context (CVE-2008-1081). Arnaud reported that a wrong representation of DOM attribute values of imported XML documents allows them to bypass sanitization filters (CVE-2008-1082).

Impact

A remote attacker could entice a user to upload a file with a known path by entering text into a specially crafted form, to execute scripts outside intended security boundaries and conduct Cross-Site Scripting attacks.

3. Resolution Information

Workaround

There is no known workaround at this time.

Resolution

All Opera users should upgrade to the latest version:

Code Listing 3.1: Resolution

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/opera-9.26"

4. References

Updated March 04, 2008

Summary: This is a Gentoo Linux Security Advisory

Security Team
Contact Address

Donate to support our development efforts.