PT-2008-2680 · Opera · Opera

Publicado 2008-02-29 · Atualizado 2012-06-07 · CVE-2008-1082

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera versions prior to 9.26

Description The issue allows remote attackers to bypass sanitization filters and conduct cross-site scripting (XSS) attacks via crafted attribute values in an XML document. This occurs because the attribute values are not properly handled during DOM presentation.

Recommendations For Opera versions prior to 9.26, update to version 9.26 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-1082

Produtos afetados

Opera

Referências · 10

• http://secunia.com/advisories/29178 · Nota
• http://opera.com/support/search/view/880 · Nota
• http://vupen.com/english/advisories/2008/0622 · Nota
• http://opera.com/docs/changelogs/linux/926 · Correção
• http://secunia.com/advisories/29029 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00010.html · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200803-09.xml · Aviso do Fabricante
• http://securityfocus.com/bid/27901 · Nota
• http://secunia.com/advisories/29152 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1082 · Nota de Segurança