Security Restriction Bypass Vulnerability in Opera Web Browser Cross-Site Scripting

Release date: 2012-08-02
Updated on:

Affected Systems:
Opera Software Opera Web Browser 12.x
Opera Software Opera Web Browser 11.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54788

Opera is a browser from Norway.

The security restriction bypass vulnerability exists in Opera Web Browser 12.01 and earlier versions. Attackers can exploit this vulnerability to bypass cross-site scripting execution filters and execute arbitrary code in affected applications, steal the Cookie authentication credential.

<* Source: vendor

Link: http://secunia.com/advisories/50044/
Http://www.opera.com/support/kb/view/1025/
Http://www.opera.com/support/kb/view/1026/
Http://www.opera.com/support/kb/view/1027/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Opera Software
--------------
Opera Software has released a Security Bulletin (1025) and corresponding patches for this:

1025: Advisory: Element HTML content can be incorrectly returned without escaping, bypassing some HTML sanitizers

Link: http://www.opera.com/support/kb/view/1025/