Searching
..

Click anywhere to stop

KLA11736
Multiple vulnerabilities in Opera

Updated: 01/22/2024
Detect date
?
06/19/2019
Severity
?
Warning
Description

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. Policy enforcement in Extensions component can be exploited via special crafted extension to bypass security restrictions.
  2. Data validation vulnerability in Blink component can be exploited remotely via special crafted webpage to perform domain spoofing.
  3. Map processing vulnerability in V8 componenct can be exploited remotely via special crafted webpage to potentially cause denial of service.
  4. Heap buffer overflow vulnerability in Angle component can be exploited remotely via special crafted webpage to potentially cause denial of service.
  5. Policy enforcement vulnerability in CORS componenct can be exploited remotely via special crafted webpage to obtain sensitive information.
  6. Security UI vulnerability in browser component can be exploited remotely via special crafted webpage to perform domain spoofing.
  7. Data validation vulnerability in URL parser component can be exploited remotely via special craft URL to bypass security restrictions.
  8. Data validation vulnerability in XMLHttpRequest component can be exploited remotely via special crafted webpage to obtain sensitive information.
  9. Cross-origin resources size disclosure vulnerability in Appcache component can be exploited remotely via special crafted webpage to obtain sensitive information.
  10. Security UI vulnerability in popup blocker component on IOS can be exploited via special crafted webpage to bypass security restrictions.
  11. Out of bounds read vulnerability in Skia component can be exploited remotely via special crafted webpage to potentially obtain sensitive information.
  12. Out of bounds read vulnerability in Swiftshader component can be exploited remotely via special crafted webpage to potentially cause denial of service.
  13. Use after free vulnerability in ServiceWorker component can be exploited remotely via special crafted webpage to potentially cause denial of service.
  14. Use after free vulnerability in Download Manager component can be exploited remotely via special crafted webpage to potentially cause denial of service.
Affected products

Opera earlier than 62.0.3331.14

Solution

Update to the latest version
Download Opera

Original advisories

Changelog for Opera 62
Stable Channel Update for Desktop

Impacts
?
OSI 
[?]

DoS 
[?]

SB 
[?]

SUI 
[?]
Related products
Opera
CVE-IDS
?
CVE-2019-58286.8High
CVE-2019-58296.8High
CVE-2019-58304.3Warning
CVE-2019-58316.8High
CVE-2019-58324.3Warning
CVE-2019-58334.3Warning
CVE-2019-58344.3Warning
CVE-2019-58354.3Warning
CVE-2019-58366.8High
CVE-2019-58374.3Warning
CVE-2019-58384.3Warning
CVE-2019-58394.3Warning
CVE-2019-58404.3Warning
CVE-2019-58495.8High
Find out the statistics of the vulnerabilities spreading in your region