Welcome to WebmasterWorld Guest from 54.196.116.152

Forum Moderators: open

Message Too Old, No Replies

Opera 8.51: Important Opera upgrade

Fixes "Highly critical" Flash Arbitrary Code Execution vulnerability

     
6:22 pm on Nov 26, 2005 (gmt 0)

Junior Member

10+ Year Member

joined:July 20, 2002
posts:118
votes: 0


Just surfed to Opera.com to check if 9.0 has been released yet and noticed an upgrade to 8.51 has been released ...announced and downloadable at [opera.com...] .

Looks like an important security upgrade for 2 vulnerabilities (a "Opera Macromedia Flash Player SWF Arbitrary Code Execution" vulnerability on Windows and "Opera Command Line URL Shell Command Injection" on Linux), both of which are rated "Highly Critical" at Secunia. Upgrading mine now - would recommend that everyone does the same.

2:27 am on Nov 27, 2005 (gmt 0)

Senior Member from CA 

WebmasterWorld Senior Member encyclo is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Aug 31, 2003
posts:9068
votes: 4


Thanks for spotting this futuresky - I see in both cases the bugs were not directly with the Opera program but with associated plugins (the Flash plugin) or scripts (the Unix/Linux startup bash script). I was slightly surprised that you need to download a completely new version of the browser just to fix these two problems, so I checked the changelog and there appear to be some other miscellaneous bug fixes added too:

[opera.com...]
[opera.com...]

<flamebait>Of course if you want a real upgrade you could try Firefox ;)</flamebait>

5:11 am on Nov 28, 2005 (gmt 0)

Administrator from JP 

WebmasterWorld Administrator bill is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Oct 12, 2000
posts:14793
votes: 87


When I first saw this advisory they were saying that it was only recommended for Linux/FreeBSD/Solaris systems. Thanks for pointing out the Windows upgrade as well.