CVE-2012-4144

2012-08-0616:55:00

CWE-79

[email protected]

web.nvd.nist.gov

opera

dom

xss

windows

unix

mac os x

nvd

cve-2012-4144

5.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.4%

JSON

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM elements, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted HTML document.

CPENameOperatorVersion
opera:opera_browseropera opera browserle12.00
opera:opera_browseropera opera browserle11.65
opera:opera_browseropera opera browsereq10.00
opera:opera_browseropera opera browsereq10.01
opera:opera_browseropera opera browsereq10.10
opera:opera_browseropera opera browsereq10.11
opera:opera_browseropera opera browsereq10.50
opera:opera_browseropera opera browsereq10.51
opera:opera_browseropera opera browsereq10.52
opera:opera_browseropera opera browsereq10.53

CPE	Name	Operator	Version
opera:opera_browser	opera opera browser	le	12.00
opera:opera_browser	opera opera browser	le	11.65
opera:opera_browser	opera opera browser	eq	10.00
opera:opera_browser	opera opera browser	eq	10.01
opera:opera_browser	opera opera browser	eq	10.10
opera:opera_browser	opera opera browser	eq	10.11
opera:opera_browser	opera opera browser	eq	10.50
opera:opera_browser	opera opera browser	eq	10.51
opera:opera_browser	opera opera browser	eq	10.52
opera:opera_browser	opera opera browser	eq	10.53