CVE-2012-6467

2013-01-0211:46:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

opera

cve-2012-6467

phishing

internet shortcuts

security vulnerability

6.4 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

64.5%

JSON

Opera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2) other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012.

CPENameOperatorVersion
opera:opera_browseropera opera browsereq4.01
opera:opera_browseropera opera browsereq7.01
opera:opera_browseropera opera browsereq9.27
opera:opera_browseropera opera browsereq7.23
opera:opera_browseropera opera browsereq2.10
opera:opera_browseropera opera browsereq9.50
opera:opera_browseropera opera browsereq9.02
opera:opera_browseropera opera browsereq10.53
opera:opera_browseropera opera browsereq7.03
opera:opera_browseropera opera browsereq10.10

CPE	Name	Operator	Version
opera:opera_browser	opera opera browser	eq	4.01
opera:opera_browser	opera opera browser	eq	7.01
opera:opera_browser	opera opera browser	eq	9.27
opera:opera_browser	opera opera browser	eq	7.23
opera:opera_browser	opera opera browser	eq	2.10
opera:opera_browser	opera opera browser	eq	9.50
opera:opera_browser	opera opera browser	eq	9.02
opera:opera_browser	opera opera browser	eq	10.53
opera:opera_browser	opera opera browser	eq	7.03
opera:opera_browser	opera opera browser	eq	10.10