Opera version 7 for Windows contains numerous errors based on inadequate restrictions, which can be exploited by a malicious person to gain knowledge of various sensitive information.

By mounting a cross-site scripting attack on a user, a malicious website can take any of the following actions on the user's system if the user is lured into visiting the site:

- Read any file on the user's system
- List directory content of the user's system
- Read emails written or received by M2 (Opera's mail program)
- Disclose browser history of previously visited webpages


Secunia commented on these vulnerabilities November last year, where users were advised not to upgrade to version 7.

http://secunia.com/advisories/7527/

Solution
Upgrade to version 7.01.

Provided and/or discovered by
GreyMagic

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.greymagic.com/adv/gm002-op/
http://www.greymagic.com/adv/gm003-op/
http://www.greymagic.com/adv/gm004-op/
http://www.greymagic.com/adv/gm005-op/
http://www.greymagic.com/adv/gm006-op/

Deep Links
Links available to Secunia VIM customers