- Security patch for Opera -
Oxygen3 24h-365d, by Panda Software (http://www.pandasoftware.com)
Madrid, November 27, 2003 - Opera has posted (*) version 7.23 of its
browser, which fixes several vulnerabilities in version 7.22 and earlier of
the program for both Linux and Windows.
These flaws stem from the way the browser handles "skin" files, which allow
the appearance of the program's interface to be modified. When Opera
processes these files a buffer overflow can be caused that could allow an
attacker to insert malicious code in compromised systems.
The patch released by Opera fixes this vulnerability, which is related with
the way "skin" files are decompressed from a .zip file. It also solves a
flaw that could allow malicious software (viruses, Trojans, spyware, etc.)
to be placed in any directory in the system.
(*) The new version can be downloaded from: http://www.opera.com/download/
Regards to you all.
Gregor
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.5) Gecko/20031007 Firebird/0.7
