« Metasploit Decloaking Engine | Main | Unicode attacks and test cases: IDN and IRI display, normalization and anti-spoofing »

Opera releases update for 'extremely severe' vulns

"Opera pushed out an update to its popular web browser on Tuesday that fixes vulnerabilities it described as "extremely severe".

The update fixes seven security bugs, some of which were previously known. Version 9.63 of the browser addresses separate code injection risks stemming from flaws in HTML parsing and text inputing, respectively. A critical bug with similar arbitrary code injection risks involving the handling of long host names in files has also been patched.

The latest version of the software also lances a cross-site scripting flaw, involving XSLT templates, as well as bugs in feed preview."

Read More: http://www.theregister.co.uk/2008/12/16/opera_update/


Feed You can follow this conversation by subscribing to the comment feed for this post.

All Comments are Moderated and will be delayed!