Description
Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
References
- 42653 third-party-advisory
- http://www.opera.com/docs/changelogs/unix/1100/
- http://www.opera.com/docs/changelogs/windows/1100/
- http://www.opera.com/docs/changelogs/mac/1100/
- SUSE-SR:2010:024 vendor-advisory