Description
Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."
References
- ADV-2008-2416 vdb-entry
- http://www.opera.com/support/search/view/896/
- 32538 third-party-advisory
- http://www.opera.com/docs/changelogs/mac/952/
- http://www.opera.com/docs/changelogs/solaris/952/
- opera-feedsource-info-disclosure(44557) vdb-entry
- 1020722 vdb-entry
- 30768 vdb-entry
- http://www.opera.com/docs/changelogs/windows/952/
- http://www.opera.com/docs/changelogs/linux/952/
- [oss-security] 20080923 Re: CVE request: Opera < 9.52 multiple vulnerabilities mailing-list
- [oss-security] 20080919 CVE request: Opera < 9.52 multiple vulnerabilities mailing-list
- 31549 third-party-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=235298
- http://www.opera.com/docs/changelogs/freebsd/952/
- GLSA-200811-01 vendor-advisory