Executive Summary

Summary
Title Opera: Multiple vulnerabilities
Informations
Name GLSA-200708-17 First vendor Publication 2007-08-22
Vendor Gentoo Last vendor Modification 2007-08-22
Severity (Vendor) Normal Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 9.3 Attack Range Network
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Synopsis

Opera contain several vulnerabilities, some of which may allow the execution of arbitrary code.

Background

Opera is a multi-platform web browser.

Description

An error known as "a virtual function call on an invalid pointer" has been discovered in the JavaScript engine (CVE-2007-4367). Furthermore, iDefense Labs reported that an already-freed pointer may be still used under unspecified circumstances in the BitTorrent support
(CVE-2007-3929). At last, minor other errors have been discovered, relative to memory read protection (Opera Advisory 861) and URI displays (CVE-2007-3142, CVE-2007-3819).

Impact

A remote attacker could trigger the BitTorrent vulnerability by enticing a user into starting a malicious BitTorrent download, and execute arbitrary code through unspecified vectors. Additionally, a specially crafted JavaScript may trigger the "virtual function"
vulnerability. The JavaScript engine can also access previously freed but uncleaned memory. Finally, a user can be fooled with a too long HTTP server name that does not fit the dialog box, or a URI containing whitespaces.

Workaround

There is no known workaround at this time for all these vulnerabilities.

Resolution

All Opera users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/opera-9.23"

References

[ 1 ] CVE-2007-3142 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3142
[ 2 ] CVE-2007-3819 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3819
[ 3 ] CVE-2007-3929 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3929
[ 4 ] CVE-2007-4367 : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4367
[ 5 ] Opera Advisory 861
http://www.opera.com/support/search/view/861/

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200708-17.xml

Original Source

Url : http://security.gentoo.org/glsa/glsa-200708-17.xml

CWE : Common Weakness Enumeration

% Id Name
50 % CWE-763 Release of Invalid Pointer or Reference
50 % CWE-416 Use After Free

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 105

OpenVAS Exploits

Date Description
2009-01-28 Name : SuSE Update for opera SUSE-SA:2007:050
File : nvt/gb_suse_2007_050.nasl
2008-09-24 Name : Gentoo Security Advisory GLSA 200708-17 (opera)
File : nvt/glsa_200708_17.nasl
2008-09-04 Name : FreeBSD Ports: opera, opera-devel, linux-opera
File : nvt/freebsd_opera7.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
45946 Opera canvas.createPattern Function Arbitrary Memory Content Remote Disclosure
43463 Opera Hostname Basic Authentication Status Bar Truncation Spoofing
38125 Opera Multiple Unspecified JavaScript DoS
38124 Opera Crafted JavaScript Arbitrary Code Execution
38123 Opera BitTorrent File Header Parsing Use-after-free Arbitrary Code Execution
38122 Opera Crafted data: URI Address Bar Spoofing

Nessus® Vulnerability Scanner

Date Description
2007-10-17 Name : The remote openSUSE host is missing a security update.
File : suse_opera-4172.nasl - Type : ACT_GATHER_INFO
2007-09-14 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-200708-17.nasl - Type : ACT_GATHER_INFO
2007-08-16 Name : The remote host contains a web browser that is affected by an arbitrary code ...
File : opera_923.nasl - Type : ACT_GATHER_INFO
2007-07-23 Name : The remote FreeBSD host is missing one or more security-related updates.
File : freebsd_pkg_12d266b6363f11dcb6c9000c6ec775d9.nasl - Type : ACT_GATHER_INFO
2007-07-23 Name : The remote host contains a web browser that is affected by multiple issues.
File : opera_922.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
Date Informations
2014-02-17 11:35:04
  • Multiple Updates