Detections
Analytics
Opera < 9.00 Multiple Vulnerabilities
high Nessus Plugin ID 21786
Synopsis
The remote host contains a web browser that is affected by multiple issues.Description
The version of Opera installed on the remote host reportedly contains an issue that presents itself when the height and width parameters of a JPEG image are set excessively high, causing Opera to allocate insufficient memory for the image and crash as it tries to write to memory at the wrong location.In addition, it is reportedly affected by a flaw that may allow an attacker to display an SSL certificate from a trusted site on an untrusted one.
Solution
Upgrade to Opera version 9.00 or later.See Also
https://www.securityfocus.com/archive/1/438074/30/0/threaded
https://secuniaresearch.flexerasoftware.com/secunia_research/2006-49/advisory/
Plugin Details
Severity: High
ID: 21786
File Name: opera_900.nasl
Version: 1.18
Type: local
Agent: windows
Family: Windows
Published: 6/30/2006
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.5
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:opera:opera_browser
Required KB Items: SMB/Opera/Version_UI
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 6/22/2006
Reference Information
CVE: CVE-2006-3198, CVE-2006-3331