Opera discloses two fresh flaws

By

Opera Software released two security advisories for Opera vulnerabilities that could allow attackers to remotely execute code on affected systems.

Opera discloses two fresh flaws
The flaws were found by VeriSign's iDefense Labs to affect Opera 9.02 and believed to affect earlier versions. It affects the browser on both Windows and Linux platforms.

The first vulnerability is a defect in Opera's Javascript SVG implementation - the browser allows improper objects to be passed on to a certain function, allowing execution of arbitrary code on a host system.

The second is a flaw in the way the system handles JPEGs, making it open to a heap-based buffer overflow from a malicious file.

Opera ranks these problems as "moderate," but experts at Secunia categorised them as "highly critical." Users are encouraged to upgrade to Opera 9.1, for which Opera Software corrected the problem.

Click here to email West Coast Bureau Chief Ericka Chickowski.
Got a news tip for our journalists? Share it with us anonymously here.
Tags:

Most Read Articles

India's alarm over Chinese spying rocks CCTV makers

India's alarm over Chinese spying rocks CCTV makers

Woolworths' CSO is Optus-bound

Woolworths' CSO is Optus-bound

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

Cyber companies hope to untangle weird hacker codenames

Cyber companies hope to untangle weird hacker codenames

Log In

  |  Forgot your password?