Legion of Lemmings - Argent Dawn EU - For Pervs (Opera users)

	Welcome, Guest. Please Login or Register

Home

Help

Legion of Lemmings - Argent Dawn EU › Foot of the Mountain › At the Gate › For Pervs (Opera users)

‹ Previous Topic | Next Topic ›

Pages: 1

For Pervs (Opera users) (Read 2119 times)

02/22/08 at 12:53:02

belegur Offline
Bossy Lemming
`omnomnom`

Gender:
Posts: 4064

http://secunia.com/advisories/29029/

~~~
1) A security issue is caused due to a design error when handling input to file form fields, which can potentially be exploited to trick a user into uploading arbitrary files.

This is related to #3 in:
SA28758

2) An error within the handling of custom comments in image properties can be exploited to execute arbitrary script code in the wrong security context when comments of a malicious image are displayed.

3) An error in the handling of attribute values when importing XML into a document can be exploited to bypass filters and conduct cross-site scripting attacks if these values are used as document content.

The vulnerabilities are reported in versions prior to 9.26.

~~

For a more permanent fix: Mozilla Firefox & Noscript. And remember to report to Interpol as a pervert - sex offender (opera user). ;p

"Ye Gods, Mardonius, what men have you brought us to fight against? Men that fight not for gold, but for glory." - Tigranes, Xerxes' general.

IP Logged

Reply #1 - 09/02/08 at 09:14:43

belegur Offline
Bossy Lemming
`omnomnom`

Gender:
Posts: 4064

Multimedia File Viewing and Clickable Links are available for Registered Members only!! You need to

If you like your bank or wow account update your browser.

~~~

Security

* Fixed a startup crash that could allow execution of arbitrary code
* Sites can no longer change framed content on other sites: see our advisory
* Fixed an issue that could allow cross-site scripting, as reported by Chris Weber of Casaba Security: details will be disclosed at a later date
* Custom shortcuts no longer pass the wrong parameters to applications, as reported by Michael A. Puls II: see our advisory
* Prevented insecure pages from showing incorrect security information, as reported by Lars Kleinschmidt: see our advisory
* Feed links can no longer link to local files: see our advisory
* Feed subscription can no longer cause the wrong page address to be displayed: see our advisory
* Fixed a problem with the CRL override for certificates that do not have a CRL specified: Override was not checked
o Also fixed related problems of a freeze occuring and a handshake that never completed

"Ye Gods, Mardonius, what men have you brought us to fight against? Men that fight not for gold, but for glory." - Tigranes, Xerxes' general.

IP Logged

Pages: 1

‹ Previous Topic | Next Topic ›

« Home

‹ Board

Top of this page