Wed, Oct 18 2006 11:12 Don

Opera Web Browser URL Handling Buffer Overflow Vulnerability

Description:
A vulnerability has been reported in Opera Web Browser, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when processing overly long URLs. This can be exploited to cause a heap-based buffer overflow by passing an overly long URL (more than 256 bytes) in a tag.

Successful exploitation allows execution of arbitrary code when a user visits a malicious website.

The vulnerability is reported in versions 9.0 and 9.01 on Windows and Linux. Version 8.x is reportedly not affected.

Solution:
Update to version 9.02.

http://secunia.com/advisories/22218/ 

Filed under: