{"id":410987,"date":"2010-03-10T08:15:06","date_gmt":"2010-03-10T13:15:06","guid":{"rendered":"http:\/\/techie-buzz.com\/?p=20255"},"modified":"2010-04-27T21:48:55","modified_gmt":"2010-04-28T01:48:55","slug":"opera-comes-clean-on-the-malformed-content-length-header-security-issue","status":"publish","type":"post","link":"https:\/\/mereja.media\/index\/410987","title":{"rendered":"Opera Comes Clean On the Malformed Content-Length Header Security Issue"},"content":{"rendered":"

\"Opera-10.5-Security-Issue\"Last week we reported that a highly critical security vulnerability<\/a> had been uncovered in Opera for Windows. Since then, there have been several conflicting statements from Opera and Secunia regarding the seriousness of the vulnerability.<\/p>\n

On one hand, Secunia claimed<\/a> that the vulnerability is serious enough to permit the execution of arbitrary code and can even be used to gain control of the user’s system. On the other hand, several Opera employees indicated that the vulnerability is non-exploitable<\/a>.<\/p>\n

A short while ago, both Opera Software<\/a> and Secunia<\/a> officially issued clarifications regarding this issue. It appears that the confusion arose because the initial proof of concept code shared with Opera was in fact non-exploitable and achieved little more than crashing Opera. Accordingly, Opera Software had issued public statements based on their initial investigations.<\/p>\n

On the next day, Secunia contacted Opera and presented a slightly modified scenario. On 64-bit systems, the modified code would still trigger a crash. However, on 32 bit systems it could cause memory corruption and (at least in theory) be exploited to execute arbitrary code. In other words, the original test case was not a security issue but the modified scenario presented by Secunia was.<\/p>\n

Opera Software has already prepared a patch and is testing the updated build internally. The patched build should be publically released soon.<\/p>\n

\nShare:<\/strong>
\nComment on This Post<\/a> |
\nTweet This<\/a> |
\nShare on Facebook<\/a> |
\nSave to Delicious<\/a> |
\nStumble This<\/a> |
\nDigg This<\/a> |
\nReddit This<\/a>\n<\/div>\n
TAGS:<\/strong> browser<\/a>, Internet Browsers<\/a>, Online Security<\/a>, Opera<\/a>, Security<\/a><\/span>
\n<\/small><\/div>\n
\nOpera Comes Clean On the Malformed Content-Length Header Security Issue<\/a> originally appeared on Techie Buzz<\/a> written by Pallab De on Wednesday 10th March 2010 08:15:06 AM. Please read the Terms of Use<\/a> for fair usage guidance. <\/div>\n

<\/p>\n

Don’t miss these Related Posts:<\/h2>\n