PDA

View Full Version : Opera users beware newly discovered flaw


vapilot2004
15th Dec 2005, 23:45
Opera Browser Users Urged to Upgrade
Security researchers have uncovered a security weakness in one of the more recent versions of the Opera Web browser that bad guys could use to trick users into downloading and running unwanted programs on their computers.

Computer security firm Secunia said its researchers found that a design error in the way Opera processes mouse clicks in new browser windows -- combined with the predictability of the position of the "File Download" dialog box -- could be exploited to trick the user into clicking on the "Open" button of a file download prompt, even if the user actually clicked on the button that says "Save" or "Cancel."

Secunia has only verified that the exploit works in Opera versions 8.01, though it said earlier versions may be vulnerable as well. To check which version you are running, open up an Opera browser window and click on "Help" from the top menu and then "About Opera." The version information should be the first thing displayed under the heading "Version Information."

If you are running Opera 8.01, it might be a good time to upgrade to the latest version -- 8.51.

Mac the Knife
16th Dec 2005, 07:16
Well intended I'm sure vapilot2004 but several week old news.

Opera 8.51 has been out for several weeks and sensible Opera users with autoupdate turned on will already be there.

But a good reminder that even OS apps are not invulnerable to little sh&^%$ts with too much time on their hands.

"Stay safer, avoid Microsoft"

.....and don't support a multi-convicted IP abuser, standards perverter and monopolist - even though they do have enough money to ignore the law and the courts.

rotorcraig
16th Dec 2005, 18:40
sensible Opera users with autoupdate turned onWhere do you turn autoupdate on? Can't find it!

RC

Mac the Knife
17th Dec 2005, 21:15
I misspoke - Opera doesn't autoupdate silently

But Opera checks for new updates regularly and will even lead you to the download page when there is a new release available.