To Opera users

[andsome]

I don't use Opera myself, but those who do may be interested in the following.

"You may drive out nature with a pitchfork,

yet she'll be constantly running back."

Horace (65-8 BC); Roman poet.

- Buffer overflow in the Opera browser -

Oxygen3 24h-365d, by Panda Software (http://www.pandasoftware.com)

Madrid, October 21 2003 - @stake has announced -at

www.atstake.com/research/advisories/2003/a102003-1.txt - a vulnerability in

the Opera browser that could allow code to be run.

This security problem stems from the fact that certain HREFs cause a buffer

overflow. Sometimes the crash will be immediate, and on other occasions when

the browser is closed, presumably as the resources are freed up. This

vulnerability could allow the execution of arbitrary code.

The Opera mail system is also affected by this problem, as an attacker can

send an email containing HTML to a user running the Opera mail client and

cause this overflow to occur when the HTML is rendered.

Opera has released version 7.21 of the browser to resolve this problem, and

which can be downloaded from: http://www.opera.com/download/

NOTE: The addresses above may not show up on your screen as single lines.

This would prevent you from using the links to access the web pages. If this

happens, just use the 'cut' and 'paste' options to join the pieces of the

URL.

------------------------------------------------------------

The 5 viruses most frequently detected by Panda ActiveScan, Panda Software's

free online scanner: 1)Bugbear.B, 2)Blaster; 3)Istbar.H; 4)Gibe.C;

5)Parite.B.

------------------------------------------------------------

To unsubscribe from Oxygen3 24h-365d, please visit:

http://www.pandasoftware.com/unsubscribe.asp

To contact with Panda Software, please visit:

http://www.pandasoftware.com/about/contact/------------------------------------------------------------

[-pops-]

Thanks for that. I do use Opera occasionally - I used to use it a lot before they brought out the "new improved" version 7 and wrecked most of its interesting attributes.

I note on the Opera site and on the download that there doesn't seem to be any reason given for issuing this new version, just that it's there.