Detections
Analytics
Opera < 9.60 Multiple Vulnerabilities
high Nessus Plugin ID 34368
Synopsis
The remote host contains a web browser that is affected by several issues.Description
The version of Opera installed on the remote host is earlier than 9.60 and thus reportedly affected by several issues :- Specially crafted URLs can cause Opera to crash or allow arbitrary code execution.
- Once a Java applet has been cached, a page that can predict the cache path for that applet can load it from cache thereby causing it to run in the security context of the local machine, allowing for reading of other files from the cache.
Solution
Upgrade to Opera 9.60 or later.See Also
http://www.opera.com/support/search/view/901/
http://www.opera.com/support/search/view/902/
http://web.archive.org/web/20170910110910/http://www.opera.com:80/docs/changelogs/windows/960/
Plugin Details
Severity: High
ID: 34368
File Name: opera_960.nasl
Version: 1.14
Type: local
Agent: windows
Family: Windows
Published: 10/8/2008
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:opera:opera_browser
Required KB Items: SMB/Opera/Version
Exploit Available: true
Exploit Ease: Exploits are available
Reference Information
CVE: CVE-2008-4694, CVE-2008-4695