Lucene search
HistoryJun 14, 2012 - 7:55 p.m.
CVE-2012-3558
cve-2012-3558
opera
address field
spoofing vulnerability
user-assisted
remote attackers
nvd
6.4 Medium
AI Score
Confidence
Low
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.3%
Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects.
Related
cvelist
cvelist
CVE-2012-3558
2022-10-03 16:15:23
prion
prion
Design/Logic Flaw
2012-06-14 19:55:00
nessus
nessus
Opera < 12 Multiple Vulnerabilities
2012-06-18 00:00:00
GLSA-201206-03 : Opera: Multiple vulnerabilities
2012-06-21 00:00:00
openvas
openvas
Opera Multiple Vulnerabilities - June12 (Mac OS X)
2012-06-21 00:00:00
Opera Multiple Vulnerabilities (Jun 2012) - Linux
2012-06-21 00:00:00
Opera Multiple Vulnerabilities (Jun 2012) - Windows
2012-06-21 00:00:00
gentoo
gentoo
Opera: Multiple vulnerabilities
2012-06-15 00:00:00
6.4 Medium
AI Score
Confidence
Low
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
56.3%
Related for CVE-2012-3558