Opera patches for seven vulnerabilities

Opera has released a new version that closes seven vulnerabilities.

Users can exploit the flaws -- deemed "highly critical" by Secunia -- to launch spoofing and cross-site scripting attacks and ultimately compromise a victim's machine.

Opera Software, on the support section of its website, graded one of the vulnerabilities "extremely severe," its highest severity rating.

That flaw involves external applications being able to start Opera when it is registered as a handler for a given protocol, according to an advisory. This could permit an attacker to crash Opera, or worse, inject malicious code.

The next highest bug in severity involves websites displaying misleading information due to an error in the way Opera checks the addresses of framed web pages.

Opera suggests all users upgrade to version 9.52.

The vulnerabilities impact Opera editions 5 to 9, according to Secunia.


More in News

Privacy-bolstering "Apps Act" introduced in House

The bill would provide consumers nationwide with similar protections already enforced by a California law.

Microsoft readies permanent fix for Internet Explorer bug used in energy attacks

Microsoft is prepping a whopper of a security update that will close 33 vulnerabilities, likely including an Internet Explorer (IE) flaw that has been used in targeted website attacks against the U.S. government.

Weakness in Adobe ColdFusion allowed court hackers access to 160K SSNs

Up to 160,000 Social Security numbers and one million driver's license numbers may have been accessed by intruders.