CVE-2012-3556

2012-06-1419:55:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2012-3556

opera

xss

pop-up window

security vulnerability

nvd

6.1 Medium

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.2%

JSON

Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site.

CPENameOperatorVersion
opera:opera_browseropera opera browsereq7.01
opera:opera_browseropera opera browsereq9.27
opera:opera_browseropera opera browsereq7.23
opera:opera_browseropera opera browsereq9.50
opera:opera_browseropera opera browsereq9.02
opera:opera_browseropera opera browsereq7.03
opera:opera_browseropera opera browsereq10.10
opera:opera_browseropera opera browsereq7.53
opera:opera_browseropera opera browsereq8.50
opera:opera_browseropera opera browsereq9.24

CPE	Name	Operator	Version
opera:opera_browser	opera opera browser	eq	7.01
opera:opera_browser	opera opera browser	eq	9.27
opera:opera_browser	opera opera browser	eq	7.23
opera:opera_browser	opera opera browser	eq	9.50
opera:opera_browser	opera opera browser	eq	9.02
opera:opera_browser	opera opera browser	eq	7.03
opera:opera_browser	opera opera browser	eq	10.10
opera:opera_browser	opera opera browser	eq	7.53
opera:opera_browser	opera opera browser	eq	8.50
opera:opera_browser	opera opera browser	eq	9.24