PT-2019-9668 · Opera · Opera

Published 2019-03-21 · Updated 2019-09-27 · CVE-2018-18913

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Opera versions prior to 57.0.3098.106

Description The issue allows an attacker to perform a DLL Search Order hijacking attack by sending a ZIP archive containing an HTML page and a malicious DLL. This can enable the attacker to gain full control of the system from any location. The problem stems from how the program loads shcore.dll and dcomp.dll files, searching for them in the same system-wide directory where the HTML file is executed.

Recommendations For Opera versions prior to 57.0.3098.106, update to version 57.0.3098.106 or later to resolve the issue. As a temporary workaround, consider restricting the execution of HTML files from untrusted sources to minimize the risk of exploitation.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2018-18913

Affected Products

Opera

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-18913 · Security Note
• https://osv.dev/vulnerability/CVE-2018-18913 · Vendor Advisory
• https://blogs.opera.com/desktop/changelog-for-57 · Vendor Advisory
• https://lucideustech.blogspot.com/2019/02/opera-search-order-hijacking-cve-2018-18913.html · Note