JavaScript Security Bug in Opera
A critical vulnerability has been discovered in the Opera Web browser.
The vulnerability, which has been assigned the CVE ID CVE-2007-4367 could be exploited by attackers to execute arbitrary malicious code. The bug, which has not yet been precisely specified, occurs on executing JavaScript code and can lead to a virtual function being called with an invalid pointer. An attacker would need to trick an Opera user into visiting a carefully crafted website to run the exploit.
Both security professionals Secunia and Opera regard the bug as highly critical. The vulnerability affects all older versions prior to 9.22 independently of the operating system platform. Opera users are advised to update to version 9.23 of Opera which was released yesterday. Besides the fix, the new version also includes stability enhancements. The browser is available from the Norwegian developer's website.
Issue 240/2020
Buy this issue as a PDF
News
-
Lenovo Now Offering Ubuntu 20.04 as an Option
Lenovo is making good on its promise to support Linux as a pre-install option.
-
Linux Deepin 20 Released
One of the most beautiful Linux distributions on the market has been refreshed.
-
A New Version of Zorin OS is Now Available
Fan-favorite, Zorin OS 15.3 is officially available.
-
Lenovo Now Offering Fedora Linux as an Option
Lenovo is making good on their Linux promise by adding Fedora into the mix.
-
System76 Launches new High-End Laptop
System76 has unleashed a beast of a mobile workstation.
-
Mozilla Lays Off Staff, Receives More Cash
In a restructuring move, Mozilla lays off 250 employees, but then inks large deal with Google.
-
LibreOffice 7 Now Available
The LibreOffice 7 office suite is now available with important compatibility improvements.
-
Microsoft Brings procmon to Linux
The creators of Windows have brought the sysinternals procmon tool to the open source operating system.
-
New KDE Slimbook Available
The makers of the KDE Slimbook have released a Ryzen-4000 powered laptop.
-
PinePhone Now Offers a Convergence Package
The makers of the Linux PinePhone are now offering a model that makes desktop/mobile convergence a reality.