ALARM Group ALERT - click for a description of ALARM, The Computing Alert System

Alert Number: 040308-02
Alert Date: 04/03/08
Alert Title: Update available for Opera
Update-to: None.
OS/Platform/Application: Opera web browser all versions older than version 9.27 (on all supported systems)
Category: ALERT
Severity: MEDIUM
Attention: Opera Users, System Administrators, Desktop Support Personnel


Summary: On April 3 2008 Opera Software ASA released version 9.27 of its popular Opera web browser.  Version 9.27 addresses two security vulnerabilities; the most likely mechanism of exploit for these vulnerabilities is the visitation of a maliciously-crafted website**.  Successful exploitation could result in application crash or (with additional exploit efforts) complete system takeover.


Recommended Actions:   Opera users and System Administrators/Support Personnel should read the advisory information (safe links provided below) and install the update as soon as possible.


**It is important to note that recent research into the nature and trends of maliciously-crafted sites shows the majority of websites hosting maliciously-crafted software are ones users presume to be "legitimate" sites or advertisements for well-known and/or trusted products.  The fact that dangerous software may be hiding within seemingly innocuous websites makes it vitally important to patch all vulnerable software on any system as soon as patches are made available from the vendor.  In cases where a patch is not yet available users should consider any website and/or media file that they visit or handle as a potential source of compromise for their computer systems.


Readers are encouraged to share this alert with family, friends, and associates who may use Opera on their home PCs.


ITS Actions: N/A


Resources:

Opera security Advisory 881:
http://www.opera.com/support/search/view/881/

Opera security Advisory 882:
http://www.opera.com/support/search/view/882/

Opera Download Page:
http://www.opera.com/download/

Secunia Advisory:
http://secunia.com/advisories/29662/

FrSirt Advisory:
http://www.frsirt.com/english/advisories/2008/1084