GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Tue Apr 15, 2008 12:26 am Post subject: [ GLSA 200804-14 ] Opera: Multiple vulnerabilities |
|
|
Gentoo Linux Security Advisory
Title: Opera: Multiple vulnerabilities (GLSA 200804-14)
Severity: normal
Exploitable: remote
Date: April 14, 2008
Bug(s): #216022
ID: 200804-14
Synopsis
Multiple vulnerabilities have been discovered in Opera, allowing for
execution of arbitrary code.
Background
Opera is a fast web browser that is available free of charge.
Affected Packages
Package: www-client/opera
Vulnerable: < 9.27
Unaffected: >= 9.27
Architectures: All supported architectures
Description
Michal Zalewski reported two vulnerabilities, memory corruption when
adding news feed sources from a website (CVE-2008-1761) as well as when
processing HTML CANVAS elements to use scaled images (CVE-2008-1762).
Additionally, an unspecified weakness related to keyboard handling of
password inputs has been reported (CVE-2008-1764).
Impact
A remote attacker could entice a user to visit a specially crafted web
site or news feed and possibly execute arbitrary code with the
privileges of the user running Opera.
Workaround
There is no known workaround at this time.
Resolution
All Opera users should upgrade to the latest version:
Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/opera-9.27" |
References
CVE-2008-1761
CVE-2008-1762
CVE-2008-1764
Last edited by GLSA on Sat Sep 08, 2012 4:26 am; edited 2 times in total |
|