Detections
Analytics
Opera < 11.61 Multiple Vulnerabilities
medium Nessus Plugin ID 57751
Language:
Synopsis
The remote host contains a web browser that is potentially affected by multiple vulnerabilities.Description
The version of Opera installed on the remote Windows host is earlier than 11.61 and is, therefore, potentially affected by multiple vulnerabilities :- Same-origin policy restriction can be bypassed via specially crafted web content and HTML frames manipulation. (Issue #1007)
- An error in local file access restrictions can allow malicious websites to determine the presence of local files. Note that the content of local files are not disclosed and an attacker would need to guess the path of a file in order to determine if the file is present.
(Issue #1008)
Solution
Upgrade to Opera 11.61 or later.See Also
http://www.opera.com/support/kb/view/1007/
http://www.opera.com/support/kb/view/1008/
http://web.archive.org/web/20170713152106/http://www.opera.com:80/docs/changelogs/windows/1161/
Plugin Details
Severity: Medium
ID: 57751
File Name: opera_1161.nasl
Version: 1.7
Type: local
Agent: windows
Family: Windows
Published: 1/31/2012
Updated: 1/2/2019
Supported Sensors: Nessus Agent, Nessus
Risk Information
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.2
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:opera:opera_browser
Required KB Items: SMB/Opera/Version
Exploit Ease: No known exploits are available
Patch Publication Date: 1/24/2012
Vulnerability Publication Date: 1/24/2012
Reference Information
BID: 51648