Opera System Information Disclosure Weakness

CRITICAL:
Not critical

IMPACT:
Exposure of system information

WHERE:
From remote

SOFTWARE:
Opera 7.x

DESCRIPTION:
Marc Schoenefeld has reported a weakness in Opera, which can be
exploited by malicious people to disclose some system information.

Opera accesses the JRE (Java Runtime Environment) directly instead of
using the Java plugin. The problem is that the “accessClassInPackage”
permission is improperly given to the “sun.*” packages, which can be
exploited by a malicious untrusted applet to gain knowledge of the
full path to the currently logged in user’s username and installation
directory.

Successful exploitation requires that Sun Java is installed and that
the permission “accessClassInPackage sun.*” is given in
“Opera.policy” (default).

The weakness has been reported in version 7.54. Other versions may
also be affected.

SOLUTION:
The weakness has been fixed in the beta version of 7.60 and will be
included in the upcoming 7.60 version.