[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Opera 7 vulnerabilities
Monitoring which pages a user visits is also possible, and in general there
seems to be some oversights in this otherwise smooth rewrite.
Add to that some of the more odd bugs functionalitywise, and I would say
there is room for a beta 2 ;)
Thor Larholm, Security Researcher
PivX Solutions, LLC
Strike Now, StrikeFirst!
From: GreyMagic Software [mailto:security@xxxxxxxxxxxxx]
Sent: 14. november 2002 17:43
Subject: Opera 7 vulnerabilities
We've done some basic security tests, in cooperation with Tom Gilder, on the
new Opera 7 beta release and found two major security vulnerabilities. These
vulnerabilities are quite obvious and likely to be discovered by malicious
Combined, they allow full read access to a victim's file system (including
both directories and files) and scripting access to any domain.
Full details will be released once Opera resolves these issues. In the
meanwhile, users are encouraged not to upgrade to Opera 7 or disable