Description
Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap (BMP) file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420.
References
- http://www.opera.com/docs/changelogs/windows/925/
- http://bugs.gentoo.org/show_bug.cgi?id=202770
- 1019435 vdb-entry
- http://www.opera.com/docs/changelogs/linux/925/
- 20080216 [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service mailing-list
- http://www.opera.com/support/search/view/876/
- 1019131 vdb-entry
- 28314 third-party-advisory
- 26937 vdb-entry
- opera-bitmaps-information-disclosure(39163) vdb-entry
- 42691 vdb-entry
- https://bugzilla.mozilla.org/show_bug.cgi?id=408076
- SUSE-SA:2008:001 vendor-advisory
- GLSA-200712-22 vendor-advisory
- ADV-2007-4261 vdb-entry
- 28169 third-party-advisory
- 28290 third-party-advisory