Title: Opera Multiple MIME Type File Dropping Weakness
Severity: MODERATE
Description:
Opera includes support for multiple MIME types used for configuration and installation of browser skins that potentially could be abused by a malicious web page to drop files onto a client system in a predictable location. The following is a list of MIME types that may be abused in this manner, and the location that files will be dropped (in a default installation of the browser):
"application/x-opera-skin" - File is dropped into C:\Program Files\Opera7\profile\Skin
"application/x-opera-configuration-skin" - File is dropped into C:\Program Files\Opera7\profile\skin.
"application/x-opera-configuration-keyboard" - File is dropped into C:\Program Files\Opera7\profile\keyboard.
"application/x-opera-configuration-mouse" - File is dropped into C:\Program Files\Opera7\profile\mouse.
"application/x-opera-configuration-menu" - File is dropped into C:\Program Files\Opera7\profile\menu.
"application/x-opera-configuration-toolbar - File is dropped into C:\Program Files\Opera7\profile\toolbar.
Through exploitation of another reported vulnerability (BID 9021), further attacks may result, such as execution of script code or information disclosure.
These issues were initially reported as resolved in version 7.22 of the browser. However, recent analysis indicates that the solution did not entirely resolve the issue, and the issue has been fully addressed in version 7.23 of the browser.
Affected Products:
- Opera Software Opera Web Browser 7.10.0
- Opera Software Opera Web Browser 7.11.0
- Opera Software Opera Web Browser 7.11.0 b
- Opera Software Opera Web Browser 7.11.0 j
- Opera Software Opera Web Browser 7.20.0
- Opera Software Opera Web Browser 7.20.0 Beta 1 build 2981
- Opera Software Opera Web Browser 7.21.0
- Opera Software Opera Web Browser 7.22.0
References:
- Opera Software: Opera Web Browser Home Page
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
