Description
Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds.
References
- 32394 third-party-advisory
- http://www.opera.com/docs/changelogs/mac/961/
- ADV-2008-2873 vdb-entry
- [oss-security] 20081021 Re: CVE Request: Opera 9.60 with security fixes mailing-list
- http://www.opera.com/support/search/view/905/
- 32538 third-party-advisory
- 32299 third-party-advisory
- opera-newsfeed1-weak-security(46005) vdb-entry
- http://www.opera.com/docs/changelogs/solaris/961/
- [oss-security] 20081022 Re: CVE Request: Opera 9.60 with security fixes mailing-list
- http://www.opera.com/docs/changelogs/windows/961/
- http://www.opera.com/docs/changelogs/linux/961/
- SUSE-SR:2008:022 vendor-advisory
- http://www.opera.com/docs/changelogs/freebsd/961/
- 31842 vdb-entry
- GLSA-200811-01 vendor-advisory