The flaws were found by VeriSign's iDefense Labs to affect Opera 9.02 and believed to affect earlier versions. It affects the browser on both Windows and Linux platforms.
The first vulnerability is a defect in Opera's Javascript SVG implementation - the browser allows improper objects to be passed on to a certain function, allowing execution of arbitrary code on a host system.
The second is a flaw in the way the system handles JPEGs, making it open to a heap-based buffer overflow from a malicious file.
Opera ranks these problems as "moderate," but experts at Secunia categorised them as "highly critical." Users are encouraged to upgrade to Opera 9.1, for which Opera Software corrected the problem.
Click here to email West Coast Bureau Chief Ericka Chickowski.
Opera discloses two fresh flaws
By
Ericka Chickowski
on Jan 5, 2007 11:45PM
Opera Software released two security advisories for Opera vulnerabilities that could allow attackers to remotely execute code on affected systems.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Partner Content
AI and automation will help drive accelerating digital transformation
Partner Content
Communication critical to CSV digital transformation, says PwC
Partner Content
Why encryption is the key to digital fitness, according to Thales
Partner Content
Setting a digital trajectory for Victoria's courts system
Sponsored Whitepapers
Tomago Aluminium improves SAP environment performance, security with Red Hat and IBM
Future of work: Support your distributed HR workforce with digital document processes
Develop a resiliency strategy that integrates risk analysis & continuity management
.jpg&w=100&c=1&s=0)
IBM Maximo: Manage any asset, anytime, any place with mobile EAM
.jpg&w=100&c=1&s=0)
Optimise your operations with APM and AI-Powered insights
