Thread: Critical security hole in current version of Opera
View Single Post
  #3   (View Single Post)  
Old 18th October 2011
Carpetsmoker's Avatar
Carpetsmoker Carpetsmoker is offline
Real Name: Martin
Tcpdump Spy
  
Join Date: Apr 2008
Location: Netherlands
Posts: 2,243
Default
As far as I can figure out from the metasploit module, this only works if DEP is disabled.

http://dev.metasploit.com/redmine/pr...r/opera_svg.rb

Quote:
NOTE: This module is incomplete because Opera by default supports DEP (since version 9), but this exploit only works with /noexecute=AlwaysOff. The following explains the challenge we need to overcome in order to support DEP-bypass:
__________________
UNIX was not designed to stop you from doing stupid things, because that would also stop you from doing clever things.
Reply With Quote