Serious holes in new Opera web browser...

Guys,

More insecurity...

Quote:

---

The company, GreyMagic Software of Jerusalem, known for its disclosure of security bugs in Microsoft Corp.'s Internet Explorer browser, detailed what it says are five new vulnerabilities in Opera 7 for Windows, the Web browser software launched a week ago by Opera of Oslo.

Three of the vulnerabilities allow an attacker to browse a victim's hard disk drive and read any file using a file browser complete with a folder tree and file viewer, GreyMagic said in a statement. The company said the flaws lie in the way Opera handles Javascript and image files and considers the vulnerabilities "critical."

The two other flaws are "severe breaches of privacy" as they can disclose part of the user's browsing history to a malicious Web site operator, GreyMagic said...

---

Source and full story here

Bye,

DKRR

And already fixed.

Quote:

---

Feb. 5, 2003: Opera 7 security update
Opera 7.01 addresses the security vulnerabilities reported by Grey Magic Feb. 4, 2003.

---

check www.opera.com :D

From greymagic:

Quote:

---

UPDATE: Opera once again lived up to its excellent response record and released version 7.01, only 5 days after initial notification. The new version appears to fix all of the reported issues. Upgrade as soon as possible.

---

Check http://www.greymagic.com/news/

im still on 6.04 for the reason that 7 ignores my mouse scroll.. and its HEAVY!! too many **** on it.. startin to look like IE or Netscape.