KLA11721
Multiple vulnerabilities in Opera
Обновлено: 04/06/2020
Дата обнаружения
14/02/2020
Уровень угрозы
High
Описание

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface.

Below is a complete list of vulnerabilities:

  1. A implementation vulnerability in Omnibox can be exploited to potentially execute arbitrary code.
  2. A policy enforcement vulneravility in Blink can be exploited to bypass security restrictions.
  3. Use after free vulnerability in audio component can be exploited to obtain sensitive information.
  4. A policy enforcement vulnerability in downloads component can be exploited to bypass security restrictions.
  5. Insufficient validation input vulnerability in Omnibox can be exploited to bypass security restrictions.
  6. A memory access vulnerability in streams component can be exploited to cause denial of service.
  7. A implementation vulnerability in Blink can be exploited to potentially execute arbitrary code.
  8. A memory access vulnerability in SQLite can be exploited to cause denial of service.
  9. A policy enforcement vulnerability in AppCache can be exploited to bypass security restrictions.
  10. A memory access vulnerability in WebRTC can be exploited to cause denial of service.
  11. A policy enforcement vulnerability in CORS can be exploited to bypass security restrictions.
  12. Read-operation memory vulnerability in SQLite can be exploited to cause denial of service.
  13. A policy enforcement vulnerability in Safe Browsing can be exploited to bypass security restrictions.
  14. A implementation vulnerability in installer component can be exploited to potentially execute arbitrary code.
  15. A policy enforcement vulnerability in Blink can be exploited to bypass security restrictions.
  16. Type confusion vulnerability in JavaScript can be exploited to cause denial of service.
  17. A data validation vulnerability in streams component can be exploited to bypass security restrictions.
  18. Write-operation memory vulnerability in WebRTC can be exploited to cause denial of service.
  19. A policy enforcement vulnerability in storage component can be exploited to bypass security restrictions.
  20. A memory access vulnerability in WebAudio can be exploited to cause denial of service.
  21. A implementation vulnerability in Skia can be exploited to potentially execute arbitrary code.
  22. A policy enforcement vulnerability in extensions component can be exploited to bypass security restrictions.
  23. A memory access vulnerability in XML can be exploited to cause denial of service.
  24. Security UI vulnerability in Omnibox can be exploited to perform domain spoofing.
  25. Security UI vulnerability in sharing component can be exploited to perform domain spoofing.
  26. A implementation vulnerability in CORS can be exploited to potentially execute arbitrary code.
  27. Uninitialized use vulnerability in PDFium can be exploited to bypass security restrictions and obtain sensitive information.
  28. Multi ‘SELECT’ vulnerability in SQLite can be exploited to cause denial of service.
  29. Insufficient validation input vulnerability in Blink can be exploited to bypass security restrictions.
  30. A policy enforcement vulnerability in navigation component can be exploited to bypass security restrictions.
  31. Integer overflow vulnerability in JavaScript can be exploited to cause denial of service.
  32. Read-operation memory vulnerability in JavaScript can be exploited to cause denial of service.
  33. A implementation vulnerability in JavaScript can be exploited to potentially execute arbitrary code.
  34. Zip-file update vulnerabilities in SQLite can be exploited to cause denial of service.
  35. Pointer dereference vulnerability in SQLite can be exploited to cause denial of service.
  36. Policy enforcement vulnerability in CSP can be expoited to bypass security restrictions.
  37. Security UI vulnerability in permissions component can be exploited to spoof user interface.
  38. Implementation vulnerability in AppCache can be exploited to execute arbitrary code and bypass security restrictions.
  39. Implementation vulnerability in interstitials component can be exploited to execute arbitrary code and bypass security restrictions.
Пораженные продукты

Opera earlier than 67.0.3575.23

Решение

Update to the latest version
Download Opera

Первичный источник обнаружения
Changelog for Opera 67
Stable Channel Update for Desktop
Оказываемое влияние
?
ACE 
[?]

OSI 
[?]

DoS 
[?]

SB 
[?]

SUI 
[?]
Связанные продукты
Opera
CVE-IDS
CVE-2020-64090.0Unknown
CVE-2020-63930.0Unknown
CVE-2020-64060.0Unknown
CVE-2020-64020.0Unknown
CVE-2020-64010.0Unknown
CVE-2020-63900.0Unknown
CVE-2020-64130.0Unknown
CVE-2019-199230.0Unknown
CVE-2020-63990.0Unknown
CVE-2020-63890.0Unknown
CVE-2020-64080.0Unknown
CVE-2020-64050.0Unknown
CVE-2020-64140.0Unknown
CVE-2020-64170.0Unknown
CVE-2020-63940.0Unknown
CVE-2020-63820.0Unknown
CVE-2020-64160.0Unknown
CVE-2020-63870.0Unknown
CVE-2020-63850.0Unknown
CVE-2020-63880.0Unknown
CVE-2020-63960.0Unknown
CVE-2020-63920.0Unknown
CVE-2019-181970.0Unknown
CVE-2020-64030.0Unknown
CVE-2020-64110.0Unknown
CVE-2020-63970.0Unknown
CVE-2020-64040.0Unknown
CVE-2020-64120.0Unknown
CVE-2020-64000.0Unknown
CVE-2020-63980.0Unknown
CVE-2019-199260.0Unknown
CVE-2020-63910.0Unknown
CVE-2020-64100.0Unknown
CVE-2020-63810.0Unknown
CVE-2020-63950.0Unknown
CVE-2020-64150.0Unknown
CVE-2019-199250.0Unknown
CVE-2019-198800.0Unknown
CVE-2020-65020.0Unknown
CVE-2020-65010.0Unknown
CVE-2020-65000.0Unknown
CVE-2020-64990.0Unknown