TweakPC



Opera 9.63 schließt Sicherheitslücken

Mittwoch, 17. Dez. 2008 15:11 - [jp]

Auch der Browser Opera steht in einer neuen Version zum Download bereit.

Die neuste Ausgabe von Opera trägt die Versionsnummer 9.63 und schließt vor allem ein paar Sicherheitslücken.

Change-Log (Security):
  • Manipulating text input contents can allow execution of arbitrary code, as reported by Red XIII. See our advisory.
  • HTML parsing flaw can cause Opera to execute arbitrary code, as reported by Alexios Fakos. See our advisory.
  • Long hostnames in file: URLs can cause execution of arbitrary code, as reported by Vitaly McLain. see our advisory.
  • Script injection in feed preview can reveal contents of unrelated news feeds, as reported by David Bloom. See our advisory.
  • Built-in XSLT templates can allow cross-site scripting, as reported by Robert Swiecki of the Google Security Team. See our advisory.
  • Fixed an issue that could reveal random data, as reported by Matthew of Hispasec Sistemas. Details will be disclosed at a later date.
  • SVG images embedded using img tags can no longer execute Java or plugin content, suggested by Chris Evans.
  • Opera now imports .p12 private certificates
Opera 9.6.3
Diese News jetzt kommentieren
GeForce GTX 295 Benchmarks und...GeForce GTX 285 Taktfrequenzen...
Verwandte Testberichte, News, Kommentare
Die Neusten News
ueber TweakPC: Impressum, Datenschutz Copyright 1999-2024 TweakPC, Alle Rechte vorbehalten, all rights reserved. Mit * gekennzeichnete Links sind Affiliates.