Heads up Opera users. New Vulnerability.

[Carbonyl]

Opera's latest release of 10.5 has a 'highly critical' security flaw. Secuina reports that this vulnerability may allow execution of remote code, and that it may also impact version 10.1 as well as 10.5. You can read more about it at this link.

Marcin Ressel has discovered a vulnerability in Opera, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error when processing HTTP responses having a malformed "Content-Length" header. This can be exploited to cause a heap-based buffer overflow via an overly large 64-bit "Content-Length" value, having the higher 32-bit part negative.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is confirmed in version 10.50 for Windows. Other versions may also be affected.

Solution
Do not browse untrusted websites or follow untrusted links.

 

[sa1]

Secunia advisory 38820 (Content-Length Buffer Overflow in 10.50) turned out to be invalid. It is not exploitable.

Twitter / Haavard: Secunia advisory 38820 (Co ...

 

[Carbonyl]

Secunia advisory 38820 (Content-Length Buffer Overflow in 10.50) turned out to be invalid. It is not exploitable.

Twitter / Haavard: Secunia advisory 38820 (Co ...

Oh believe me, it's exploitable. Plenty much so. There are proof of concept attacks already published on the web, but I won't link to live exploits on this forum. I wouldn't be surprised if Opera is just trying to downplay this issue to the point of making people not care about it, because they just released 10.5 and it'll be another few months before they fix the gaping security hole.

I'm pretty sure they're going to get into BIG trouble over this one if they play it that way. That's what got Adobe into trouble with the Aurora attacks, and one of the reasons that Google got hacked.

 

[sa1]

Can you PM me a link where the php code works? (Only if its acceptable to you. I won't spread it.). I want to try for myself.
I don't know if they are playing the security-by-obscurity card. But haavard is only an employee and this is not the official Opera reply yet. At least they have a good track record at patching vulnerabilities quickly that do make it out into the open unlike IE. So hopefully if what you are saying is true, it should be fixed quickly.

 

[Carbonyl]

Can you PM me a link where the php code works? (Only if its acceptable to you. I won't spread it.). I want to try for myself.
I don't know if they are playing the security-by-obscurity card. But haavard is only an employee and this is not the official Opera reply yet. At least they have a good track record at patching vulnerabilities quickly that do make it out into the open unlike IE. So hopefully if what you are saying is true, it should be fixed quickly.

Sure, I'll PM you with the URL to the PHP exploit as soon as I can. EDIT: For some reason the forums say you've been set to not receive private messages. Sorry, I can't seem to send you the link because of this!

Notable, SANS just picked up this story as well. Their reporting says that there are actually two overflow vulnerabilities - one is a DoS crash, the other allows remote code execution. See this story for more details.

 

[Dinesh]

Never used Opera.

 

[sa1]

Don't know why I am not configured to receive PMs but I didn't find an option.
However I found the php exploit on the web.
I was not able to make it run on my localhost. Not sure if there are any requirements.
Regarding the DoS problem, thats not a security issue in my opinion, more a stability issue. You won't be compromised that way.
Edit: haavard posted yet another message:
http://twitter.com/opvard/status/10034578436

 

[TheIgster]

Never used Opera.

Then you are missing out. Opera is the ONLY browser I will ever use. This 10.50 version is fast...very, very fast.

 

[zezasu]

Never used Opera.

Then you are missing out. Opera is the ONLY browser I will ever use. This 10.50 version is fast...very, very fast.

Eh I dont know it crashes on heavy flash based websites like this sometimes.
allkpop ? breaking k-pop celebrity gossip and news!

Believe me i like Opera a lot but its still not ready. Its adobe issue with flash but I also hate that it appears with multiples on my task bar instead of me using the tabs built into the browser. I like the sleekness but what made it a very fun browser has me lost. I am not willing to part because of its gestures for right and left clicking with forward and backwards on web-pages.
Jump-list and private is nice but I think ill roll back to 10.1 today

 

[alwinwinjoe]

Awww...I was just planning on a move. Oh well back to Firefox...

 

[smarteyeball]

Eh I dont know it crashes on heavy flash based websites like this sometimes.
allkpop ? breaking k-pop celebrity gossip and news!

Considering on how many other gazillion sites that one tries to connect to, I'm not surprised....

 

[TheIgster]

Never used Opera.

Then you are missing out. Opera is the ONLY browser I will ever use. This 10.50 version is fast...very, very fast.

Eh I dont know it crashes on heavy flash based websites like this sometimes.
allkpop ? breaking k-pop celebrity gossip and news!

Believe me i like Opera a lot but its still not ready. Its adobe issue with flash but I also hate that it appears with multiples on my task bar instead of me using the tabs built into the browser. I like the sleekness but what made it a very fun browser has me lost. I am not willing to part because of its gestures for right and left clicking with forward and backwards on web-pages.
Jump-list and private is nice but I think ill roll back to 10.1 today

Multiples on your task bar? I don't have that. It's a single task with all the tabs. I don't know, guess I don't visit many sites with flash because I have no issues at all. Runs fast and works well here without issue.

 

[zezasu]

Then you are missing out. Opera is the ONLY browser I will ever use. This 10.50 version is fast...very, very fast.

Eh I dont know it crashes on heavy flash based websites like this sometimes.
allkpop ? breaking k-pop celebrity gossip and news!

Believe me i like Opera a lot but its still not ready. Its adobe issue with flash but I also hate that it appears with multiples on my task bar instead of me using the tabs built into the browser. I like the sleekness but what made it a very fun browser has me lost. I am not willing to part because of its gestures for right and left clicking with forward and backwards on web-pages.
Jump-list and private is nice but I think ill roll back to 10.1 today

Multiples on your task bar? I don't have that. It's a single task with all the tabs. I don't know, guess I don't visit many sites with flash because I have no issues at all. Runs fast and works well here without issue.

Really? Thats rather odd unless your using basic. On my Aero it comes up with multiples even though its one browser just running. It is just like IE8.

I posted a picture with these 4 browsers. I might try a new install. Never got around to going back to 10.1 And I am testing Luna from Kari still not sure I will like it and its settings are overly complicated but I like that I can have both opera/ Firefox all mixed in.

The reason I mentioned the issue about flash is regular people probably venture more into flash based websites and such. I know my brother looks at all those heavy intense flash sites.

At least it doesn't crash like the beta though, I am happy for that.

 

[Terrorz]

Well another reason why FF is best

 

[zezasu]

Well another reason why FF is best

I would rather not talk so much about why FF isn't as liked or my veins would burst with overflowing anger that will be felt for miles from my house.

I still like Opera despite its minor setbacks.

 

[Terrorz]

Well another reason why FF is best

I would rather not talk so much about why FF isn't as liked or my veins would burst with overflowing anger that will be felt for miles from my house.

I still like Opera despite its minor setbacks.

lol, well we all have our reasons why we like something better than others.

 

[zezasu]

Well another reason why FF is best

I would rather not talk so much about why FF isn't as liked or my veins would burst with overflowing anger that will be felt for miles from my house.

I still like Opera despite its minor setbacks.

lol, well we all have our reasons why we like something better than others.

Yes. It isn't bad now but if i think about the headaches with Firefox, it sure doesn't bring cute cuddly kittens and ice cream in my memories.


I would switch to it but the right click and left clicking for forward and backward capabilities that Opera has, Firefox doesn't have in an add on yet. Still look day to day for it if I am not busy. Speed dial would be nice too.

 

[TheIgster]

Really? Thats rather odd unless your using basic. On my Aero it comes up with multiples even though its one browser just running. It is just like IE8.

I'm using Aero as well. Perhaps because my taskbar buttons are set to never combine, I don't know, but I only get one item down on my taskbar, as you see here.

 

[TheIgster]

Well another reason why FF is best

Love this epic battle between browser users. Sorry, I've tried FF numerous times and I simply don't care for it. I would rather use IE over FF. I'll stick with Opera, thanks.

 

[zezasu]

Ok Thanks about that Igster. I still cant look at your picture without thinking of Lost but that helps. It took awhile to get used to the Icons so I don't feel like switching that to as it feels more old to me.

Well another reason why FF is best

Love this epic battle between browser users. Sorry, I've tried FF numerous times and I simply don't care for it. I would rather use IE over FF. I'll stick with Opera, thanks.

Its how I feel but FF has adblock so its the only reason It works slightly better. I dont think of this as a battle though. I like to see what is good and bad for a browser because i might enjoy something different. Downthemall isnt so bad when I feel like spaming downloads of pictures for cars on websites at times. Links for Opera isn't exactly the Big cheese to mass downloading items.