Opera Browser BitTorrent Header Parsing Remote Code Execution Vulnerability

[xcdegasp]

Rated as : High Risk
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2007-07-20

Originariamente inviato da Descrizione:

A vulnerability has been identified in Opera, which could be exploited by attackers to execute arbitrary code. This issue is caused by an error when parsing a specially crafted BitTorrent header, which could be exploited by attackers to cause a vulnerable browser to use memory that has already been freed, resulting in an invalid object pointer being dereferenced when a user right clicks on the transfer and removes it.

Affected Products:
Opera versions prior to 9.22

Solution:
Upgrade to Opera version 9.22 :
http://www.opera.com/download/


Fonte: http://www.frsirt.com/english/advisories/2007/2584

[c.m.g]

Originariamente inviato da xcdegasp

Solution:
Upgrade to Opera version 9.22 :
http://www.opera.com/download/


Fonte: http://www.frsirt.com/english/advisories/2007/2584

già fatto

comunque grazie per l'info, in effetti non sapevo il perchè di questo upgrade.

[sampei.nihira]

Grazie.
Ho aggiornato adesso con la funzione "ricerca aggiornamenti"....anche se non uso mai il bitTorrent.....

[FOXYLADY]

Grazie
Aggiornato anche io alla 9.22.