Opera patches for seven vulnerabilities

By

Alternative web browser Opera has delivered an update to address seven critical vulnerabilities.


Opera has released a new version that closes seven vulnerabilities.

Users can exploit the flaws -- deemed "highly critical" by Secunia -- to launch spoofing and cross-site scripting attacks and ultimately compromise a victim's machine.

Opera Software, on the support section of its website, graded one of the vulnerabilities "extremely severe," its highest severity rating.

That flaw involves external applications being able to start Opera when it is registered as a handler for a given protocol, according to an advisory. This could permit an attacker to crash Opera, or worse, inject malicious code.

The next highest bug in severity involves websites displaying misleading information due to an error in the way Opera checks the addresses of framed web pages.

Opera suggests all users upgrade to version 9.52.

The vulnerabilities impact Opera editions 5 to 9, according to Secunia.

See original article on scmagazineus.com
Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

First npm worm "Shai-Hulud" released in supply chain attack

First npm worm "Shai-Hulud" released in supply chain attack

"VoidProxy" PhishKit targets Google and Microsoft users

"VoidProxy" PhishKit targets Google and Microsoft users

Apple adds "mercenary spyware" protection to new A19 chip

Apple adds "mercenary spyware" protection to new A19 chip

Phishing attack nets enormous npm supply chain compromise

Phishing attack nets enormous npm supply chain compromise

Log In

  |  Forgot your password?