Detections
Analytics
Opera < 11.10 Multiple Vulnerabilities
high Log Correlation Engine Plugin ID 800862
Synopsis
The remote host has a web browser that is vulnerable to multiple attack vectors.Description
The remote host is running the Opera web browser.Versions of Opera earlier than 11.10 are potentially affected by multiple vulnerabilities : - An unspecified vulnerability allows remote attackers to hijack searches and customizations using unspecified third-party applications. (CVE-2011-2634)
- Several errors exist that can cause application crashes. Affected items or functionalities are the handling of the CSS pseudo-class ': hover' if used with transforms on a floated element, unspecified web content, and the handling of an embedded Java applet with empty parameters. (CVE-2011-2635, CVE-2011-2636, CVE-2011-2637, CVE-2011-2638, CVE-2011-2640)
- An error in the handling of hidden animated GIF images can cause a denial of service through CPU consumption as image repaints are triggered. (CVE-2011-2639)
Solution
Upgrade to Opera 11.10 or later.See Also
Plugin Details
Severity: High
ID: 800862
Family: Web Clients
Published: 7/5/2011
Nessus ID: 55506
Risk Information
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
Patch Publication Date: 4/12/2011
Vulnerability Publication Date: 7/1/2011
Reference Information
CVE: CVE-2011-2634, CVE-2011-2635, CVE-2011-2636, CVE-2011-2637, CVE-2011-2638, CVE-2011-2639, CVE-2011-2640