Description
Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache pathname of a cached Java applet and then launching this applet from the cache, leading to applet execution within the local-machine context.
References
- 31643 vdb-entry
- 32394 third-party-advisory
- 32538 third-party-advisory
- http://www.opera.com/docs/changelogs/solaris/960/
- [oss-security] 20081022 Re: CVE Request: Opera 9.60 with security fixes mailing-list
- 1021017 vdb-entry
- [oss-security] 20081021 CVE Request: Opera 9.60 with security fixes mailing-list
- 32177 third-party-advisory
- opera-java-applets-information-disclosure(45723) vdb-entry
- http://www.opera.com/docs/changelogs/windows/960/
- SUSE-SR:2008:022 vendor-advisory
- http://www.opera.com/docs/changelogs/linux/960/
- http://www.opera.com/docs/changelogs/mac/960/
- ADV-2008-2765 vdb-entry
- http://www.opera.com/support/search/view/902/
- http://www.opera.com/docs/changelogs/freebsd/960/
- GLSA-200811-01 vendor-advisory