Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Opera before 9.63 allows remote attackers to inject arbitrary web script or HTML via built-in XSLT templates.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Opera Web浏览器XSLT内嵌模板跨站攻击漏洞
Vulnerability Description
Opera是挪威欧朋（Opera Software）公司所开发的一款Web浏览器，它支持多窗口浏览、可定制用户界面等。 Opera的9.63之前版本中存在多个安全漏洞，可能允许恶意用户执行跨站脚本、泄露敏感信息或导致拒绝服务。 1) 操控某些文本区内容可以触发缓冲区溢出，导致执行任意代码。 2) 某些HTML construct可能导致DOM意外更改，触发崩溃。 3) file: URL中超长的主机名可以触发缓冲区溢出，导致执行任意代码。远程Web页面无法引用file: URL，因此攻击者必须诱骗用户手动
CVSS Information
N/A
Vulnerability Type
N/A