Newsletter

Security Vulnerability in Opera: MyFlaw and MyFlow Feature Detected and Patched

Summary: According to Hacker News, a foreign security news outlet, a security vulnerability has been discovered in Opera, a popular web browser. It has been analyzed that if the exploit is successful, the attacker will be able to execute any file on the victim’s operating system. This vulnerability was named MyFlaw. This is because the vulnerability exists and is enabled in Opera’s My Flow feature. Security firm Guardio Labs discovered this in November and reported it to Opera, which released an update and patched it the same month. Guardio, who believed the patch had been sufficiently applied, recently disclosed detailed information about this vulnerability.

[이미지 = gettyimagesbank]

Background: MyFlow is a feature with a chat-like interface installed by default in browsers and through it users share notes and files. These notes and files can be opened via a web interface, meaning the files can be executed beyond the browser’s built-in security features. It affects both Opera and Opera GX web browsers.

Observations: “Modern browsers are very complex and have many features. “This actually presents a lot of opportunities for attackers.” -Gudio Labs-
[국제부 문가용 기자(globoan@boannews.com)]

www.boannews.com) Reproduction and redistribution prohibited>

#MyFlow #vulnerability #discovered #Opera #browser #arbitrary #file #execution