oss-security - Re: CVE request: Opera <9.27 Multiple issues

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sun, 13 Apr 2008 01:44:29 +0200
From: Robert Buchholz <rbu@...too.org>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE request: Opera <9.27 Multiple issues

On Saturday 12 April 2008, Steven M. Christey wrote:
> On Fri, 11 Apr 2008, Robert Buchholz wrote:
> >     * Improved keyboard handling of password inputs, as reported by
> > Trystan S.
> >                 --------------
> > I have no idea what the third vulnerability actually means.
>
> Me neither...

<snip>

> ======================================================
> Name: CVE-2008-1764
> Status: Candidate
> URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1764
> Reference: CONFIRM:http://www.opera.com/docs/changelogs/windows/927/
>
> Unspecified vulnerability in Opera for Windows before 9.27 has
> unknown impact and attack vectors related to "keyboard handling of
> password inputs."


It is listed in the Linux ChangeLog, too:
http://www.opera.com/docs/changelogs/linux/927/

Robert

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.