Test Kennung:	1.3.6.1.4.1.25623.1.0.802828
Kategorie:	General
Titel:	Opera Multiple Vulnerabilities - March12 (Linux)
Zusammenfassung:	The host is installed with Opera and is prone to multiple; vulnerabilities.
Beschreibung:	Summary: The host is installed with Opera and is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to - An error in web page dialogs handling which displays the wrong address in the address field. - An error in 'history.state' which leaks the state data from cross domain pages via 'history.pushState' and 'history.replaceState' functions. - It fails to ensure that a dialog window is placed on top of content windows, allows attackers to trick users into executing downloads. - A small window for the download dialog. - A timed page reloads and redirects to different domains. - printing issues which allows data leaks to other system users or allows them to corrupt data. Vulnerability Impact: Successful exploitation could allow attackers to execute arbitrary code in the context of the browser, inject scripts, bypass certain security restrictions, conduct spoofing attacks or cause a denial of service condition. Affected Software/OS: Opera version prior to 11.62 on Linux Solution: Upgrade to the Opera version 11.62 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1924 http://osvdb.org/80620 http://secunia.com/advisories/48535 SuSE Security Announcement: openSUSE-SU-2012:0610 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html XForce ISS Database: opera-dialog-box-code-execution(74349) https://exchange.xforce.ibmcloud.com/vulnerabilities/74349 Common Vulnerability Exposure (CVE) ID: CVE-2012-1925 http://osvdb.org/80621 XForce ISS Database: opera-content-window-code-exec(74503) https://exchange.xforce.ibmcloud.com/vulnerabilities/74503 Common Vulnerability Exposure (CVE) ID: CVE-2012-1926 http://osvdb.org/80622 XForce ISS Database: opera-historypushstate-info-disclosure(74351) https://exchange.xforce.ibmcloud.com/vulnerabilities/74351 Common Vulnerability Exposure (CVE) ID: CVE-2012-1927 http://osvdb.org/80623 XForce ISS Database: opera-address-field-spoofing(74502) https://exchange.xforce.ibmcloud.com/vulnerabilities/74502 Common Vulnerability Exposure (CVE) ID: CVE-2012-1928 http://osvdb.org/80624 XForce ISS Database: opera-redirects-spoofing(74353) https://exchange.xforce.ibmcloud.com/vulnerabilities/74353 Common Vulnerability Exposure (CVE) ID: CVE-2012-1930 XForce ISS Database: opera-printing-info-disclosure(74501) https://exchange.xforce.ibmcloud.com/vulnerabilities/74501 Common Vulnerability Exposure (CVE) ID: CVE-2012-1931 XForce ISS Database: opera-printing-symlink(74500) https://exchange.xforce.ibmcloud.com/vulnerabilities/74500
Copyright	Copyright (C) 2012 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.