|
Opera update to fix a vulnerability |
|
Thursday, 28 September 2006 |
|
An update has been released for the browser Opera to prevent a recently discovered vulnerability, which can be exploited by attackers to bypass security restrictions.
The vulnerability lies in an error in the handling and verification of RSA keys using 3 as the public exponent. A specially-crafted digital certificate could bypass Opera signature verification. An attacker could exploit this flaw to forge PKCS #1 v1.5 signatures and bypass security verifications in which these types of certificates are used.
This vulnerability affects Opera 9.01 and earlier versions. To avoid this problem, version 9.02 has been released, which can be downloaded from http://www.opera.com/download/. More information is available at http://www.opera.com/support/search/supsearch.dml?index=845.
|
Advertises 