[<prev] [next>] [day] [month] [year] [list]
Message-Id: <201008121315.o7CDFD1l007911@CA-IX-1.intnet>
Date: Thu, 12 Aug 2010 15:15:13 +0200
From: Secunia Research <remove-vuln@...unia.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Secunia Research: Opera "Download" Dialog File
Execution Security Issue
======================================================================
Secunia Research 12/08/2010
- Opera "Download" Dialog File Execution Security Issue -
======================================================================
Table of Contents
Affected Software....................................................1
Severity.............................................................2
Vendor's Description of Software.....................................3
Description of Vulnerability.........................................4
Solution.............................................................5
Time Table...........................................................6
Credits..............................................................7
References...........................................................8
About Secunia........................................................9
Verification........................................................10
======================================================================
1) Affected Software
Opera 10.53, 10.54, and 10.60.
NOTE: Other versions may also be affected.
======================================================================
2) Severity
Rating: Moderately critical
Impact: System access
Where: From remote
======================================================================
3) Vendor's Description of Software
"Take control of the Web like never before - Opera has you flying
through Web pages with never-before-seen speed and surfing smartly
with advanced features that make it easy to get the most from the
Web.".
Product Link:
http://www.opera.com/
======================================================================
4) Description of Vulnerability
Secunia Research has discovered a security issue in Opera, which can
be exploited by malicious people to compromise a vulnerable system.
The "Download" dialog provides the option to run a downloadable
executable at a predictable location in the browser window. This can
be exploited to trick a user into clicking on the "Run" button by
positioning a new window on top of the "Download" dialog that is
closed e.g. via a timeout shortly before the user clicks on a link
within this window.
This is related to:
SA15781
======================================================================
5) Solution
Update to version 10.61.
======================================================================
6) Time Table
15/07/2010 - Vendor notified.
15/07/2010 - Vendor response.
12/08/2010 - Public disclosure.
======================================================================
7) Credits
Discovered by Jakob Balle and Sven Krewitt, Secunia Research.
======================================================================
8) References
The Common Vulnerabilities and Exposures (CVE) project has assigned
CVE-2010-2576 for the vulnerability.
SA15781:
http://secunia.com/advisories/15781/
======================================================================
9) About Secunia
Secunia offers vulnerability management solutions to corporate
customers with verified and reliable vulnerability intelligence
relevant to their specific system configuration:
http://corporate.secunia.com/
Secunia also provides a publicly accessible and comprehensive advisory
database as a service to the security community and private
individuals, who are interested in or concerned about IT-security.
http://secunia.com/
Secunia believes that it is important to support the community and to
do active vulnerability research in order to aid improving the
security and reliability of software in general:
http://corporate.secunia.com/secunia_research/33/
Secunia regularly hires new skilled team members. Check the URL below to
see currently vacant positions:
http://secunia.com/secunia_vacancies/
Secunia offers a FREE mailing list called Secunia Security Advisories:
http://secunia.com/secunia_security_advisories/
======================================================================
10) Verification
Please verify this advisory by visiting the Secunia website:
http://secunia.com/secunia_research/2010-110/
Complete list of vulnerability reports published by Secunia Research:
http://secunia.com/secunia_research/
======================================================================
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists