New vulnerability discovered in the browser

Jul 20, 2007 13:09 GMT  ·  By

As you know, the famous Opera browser supports BitTorrents downloads because it includes support for .torrent files. But have you ever used this special function of the browser? If the answer is yes, you should really read this article. If the answer is no, you should also read it in order to know what's expecting you if you're thinking to abandon your stand-alone BitTorrent client. First of all, it works quite slow and sometimes it dramatically increases the websites' loading times. Secondly, it's not secure. And I'm not the one saying it but iDefense Labs, a security company that discovered a critical flaw in Opera's BitTorrent support.

You should know that a successful exploitation of the flaw might allow an attacker to control the affected computer with the same privileges owned by the user who is currently logged in. According to iDefense, "when parsing a specially crafted BitTorrent header, Opera uses memory that has already been freed. This can result in an invalid object pointer being dereferenced, and may allow for the execution of arbitrary code. The vulnerability is triggered when the user right clicks on the transfer and removes it."

The only solution is to update your web-browser to the latest version, 9.22 that was especially released to correct this problem.

"Exploitation of this vulnerability allows an attacker to execute arbitrary code on the affected host with the privileges of the logged in user. The attacker must persuade a vulnerable user into clicking a link to a BitTorrent file. The targeted user must subsequently remove the entry from the download pane. The requirement to remove the torrent is not considered to be a mitigating factor since it is natural for a user to attempt to do so when a transfer is not progressing," iDefense Labs added in the security advisory.

If you want to download the latest version of Opera Browser, you can take it straight from Softpedia using this link.