Detections
Analytics
Opera < 9.24 Multiple Vulnerabilities
high Nessus Plugin ID 27506
Synopsis
The remote host contains a web browser that is affected by two vulnerabilities.Description
The version of Opera installed on the remote host reportedly may allow for arbitrary code execution if it has been configured to use an external news reader or email client and a user views a specially crafted web page.In addition, it may also allow a script to bypass the same-origin policy and overwrite functions on pages from other domains when processing frames from different websites, which can be leveraged to conduct cross-site scripting attacks.
Solution
Upgrade to Opera version 9.24 or later.See Also
http://www.opera.com/support/search/view/866/
Plugin Details
Severity: High
ID: 27506
File Name: opera_924.nasl
Version: 1.16
Type: Local
Agent: windows
Family: Windows
Published: 10/17/2007
Updated: 5/27/2026
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2007-5541
Vulnerability Information
CPE: cpe:/a:opera:opera_browser
Required KB Items: installed_sw/Opera
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 10/17/2007
Reference Information
CVE: CVE-2007-5540, CVE-2007-5541
CWE: 20