Print this page. Recommend
Slashdot it! Delicious Digg

JavaScript Security Bug in Opera

Aug 16, 2007

A critical vulnerability has been discovered in the Opera Web browser.

The vulnerability, which has been assigned the CVE ID CVE-2007-4367 could be exploited by attackers to execute arbitrary malicious code. The bug, which has not yet been precisely specified, occurs on executing JavaScript code and can lead to a virtual function being called with an invalid pointer. An attacker would need to trick an Opera user into visiting a carefully crafted website to run the exploit.

Both security professionals Secunia and Opera regard the bug as highly critical. The vulnerability affects all older versions prior to 9.22 independently of the operating system platform. Opera users are advised to update to version 9.23 of Opera which was released yesterday. Besides the fix, the new version also includes stability enhancements. The browser is available from the Norwegian developer's website.

(Jan Rähm)

Comments


Print this page. Recommend
Slashdot it! Delicious Digg
Related Articles
Security holes in many PDF components
Firefox 2.0.0.9 Corrects Latest Release
Kernel 2.6.25: 64 Bit Systems At Risk
Critical Error in Star Office Closed
Mozilla Closes Down Critical Security Holes
Beta 1: Opera 9.6 with RSS preview
Live Streaming of LISA '08

22nd Large Installation System Administration Conference

If you follow the fortunes of large installation IT, tune in on November 12-14 for a front row ticket to the Invited Talks series of the USENIX LISA conference.

Find out more

 

In the US and Canada, Linux Magazine is known as Linux Pro Magazine.
Entire contents © 2008 [Linux New Media USA, LLC]
Linux New Media web sites:
North America: [Linux Pro Magazine]
UK/Worldwide: [Linux Magazine]
Germany: [Linux-Magazin] [LinuxUser] [EasyLinux] [Linux-Community] [Linux-Nachrichten] [Linux Events]
Eastern Europe: [Linux Magazine Poland] [Linux Community Poland] [Darmowe Programy Poland] [Open Source DVD Poland] [Linux Magazin Romania]
International: [Linux Magazine Brazil] [Linux Magazine Spanish]
Corporate: [Linux New Media AG]