Printing issue can allow data leaks to other system users, or allow them to corrupt data – Opera Security Advisories

Severity

Low

Description

When pages are printed by Opera, a temporary file is created, which contains the document to print. This document is not created with the correct permissions, allowing other users of the system to read its contents. When printed with certain popular printing frameworks, an additional temporary file is created by the framework in a predictable location. Untrusted users can therefore use file links to direct the file’s contents into existing documents, corrupting them.

Affected Platforms

This issue affects Opera for Linux/Unix.

Opera’s Response

Opera Software has released Opera 11.62, where this issue has been fixed.

Credits

Thanks to Christof Meerwald for reporting this issue to Opera Software.