Torrent overflows Opera
Print storyBrowser maker lances file download bug
Posted in Anti-Virus, 23rd May 2007 10:49 GMT
VMware whitepaper - The business case for Virtualization
Opera has fixed a flawed involving how its browser handles Torrent files that allowed hackers to attack vulnerable systems.
A boundary error in handling certain types of Torrent files exposed version 9.x of the browser to a stack-based buffer overflow, providing a user right-clicks a malicious Torrent entry in the transfer manager. Simply clicking on the Torrent link will not trigger the flaw, which Opera nonetheless describes as "highly critical".
Successful exploitation creates a means for hackers to inject hostile code.
The flaw, discovered by security researchers at iDefense, has been confirmed in Opera version 9.20 for Windows. Other versions may also be affected. Users are advised to upgrade to Opera version 9.21 to guard against attack.
Opera has included a built-in BitTorrent client in its browser software since the release of version 9.0, last June. ®
The Business Case for Virtualization
HP and VMware take the cost and complexity out of IT
Distribute the workload for greater efficiency and power
Rethink virtualization in business terms
Implementing energy efficient data centers
Scareware mongers hitch free ride on Microsoft.com and others
Home Office death list 'stops ID fraud'
Boffin brings 'write once, run anywhere' to Cisco hijacks
Electronic votes mysteriously vanish in Ohio election