Page is a not externally linkable
- Browsers
-- Opera Browser Usage and Support
---- Security upgrade for Opera


RammsteinNicCage - 5:35 pm on Dec 13, 2004 (gmt 0)


The upgrade (7.54u1) can be downloaded from here: [arc.opera.com...]

From [opera.com...]
Platform: All platforms

Opera security advisory
- Named frames or windows can be hi-jacked by malicious frames or windows.
- Periods in the file name and non-breaking spaces in the Content-Type header can make the save/open dialog misleading. A user may be convinced that an executable file is something else, for example a PDF document.
- Applets have access to sun.* packages
- Liveconnect: com.opera.EcmascriptObject constructor is accessible to Java
- Liveconnect reveals the path to the user's home directory. This can make other vulnerabilities easier to exploit.

Severity: Moderate/high

Vulnerable versions of Opera
7.54 and earlier

Apparently the beta 7.60p4 they have out is also partially vulnerable to this.

Jennifer


Thread source:: http://www.webmasterworld.com/opera_browser/464.htm
Brought to you by WebmasterWorld: http://www.webmasterworld.com