CVE-2012-6466

Opera before 12.10 does not properly handle incorrect size data in a WebP image, which allows remote attackers to obtain potentially sensitive information from process memory by using a crafted image as the fill pattern for a canvas...

CVE-2012-6460

Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site...

CVE-2012-6467

Opera before 12.10 follows Internet shortcuts that are referenced by a 1 IMG element or 2 other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012...

CVE-2012-6466

CVE-2012-6466 affects Opera before 12.10, where improper handling of incorrect size data in a WebP image can cause a crafted image used as a fill pattern for a canvas to disclose potentially sensitive information from the process memory. The vulnerability enables memory information disclosure via...

CVE-2012-6467

CVE-2012-6467 is confirmed to affect Opera (pre-12.10) via how it follows Internet shortcuts referenced by an IMG or inline element, enabling phishing-style attacks on crafted pages (described as exploited in the wild in 2012). OpenVAS entries map this family of vulnerabilities to a high base sco...

CVE-2012-6461

Opera: CVE-2012-6461 concerns the X.509 certificate-validation in Opera’s HTTPS implementation. Affected: Opera before 12.10. Description: remote attackers could cause a false indication of revocation-status success by triggering a failure of a single checking service. Mitigation: upgrade to a ne...

CVE-2012-6464

Opera is affected by CVE-2012-6464 (XSS) as documented in multiple sources. The Gentoo GLSA 201406-14 and related OpenVAS entries reference Opera vulnerabilities and explicitly recommend upgrading to the latest Opera package, for Gentoo: >=www-client/opera-12.13_p1734, as the remediation. The ...

CVE-2012-6461

The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers to trigger a false indication of successful revocation-status checking by causing a failure of a single checking service...

CVE-2012-6462

Opera before 12.10 does not properly implement the Cross-Origin Resource Sharing CORS specification, which allows remote attackers to bypass intended page-content restrictions via a crafted request...

CVE-2012-6462

CVE-2012-6462 refers to Opera before 12.10, where improper CORS handling allows remote attackers to bypass page-content restrictions with a crafted request. The impact is a partial confidentiality concern; no exploitation details are provided in the sources. Remediation guidance from Gentoo GLSA ...

CVE-2012-6463

Cross-site scripting XSS vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an unspecified sequence of loading of documents and loading of data: URLs...

CVE-2012-6468

Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a long HTTP response...

PT-2013-1956

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.10 Description The issue arises from improper handling of incorrect size data in a WebP image, allowing remote attackers to obtain potentially sensitive information from process memory. This can be achieved by using ...

PT-2013-1958

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.12 Description The issue allows local users to obtain sensitive information by reading cache, password, or configuration files due to weak permissions for the profile directory. It may also be possible for local user...

PT-2013-1953

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.67 Opera versions 12.x prior to 12.02 Description The issue allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site...

PT-2013-1955

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.10 Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript code, specifically by overriding methods of native objects in documents that have different origins. This...

PT-2013-1954

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.10 Description The issue concerns the X.509 certificate-validation functionality in Opera's https implementation. It allows remote attackers to trigger a false indication of successful revocation-status checking by...

PT-2013-1957

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.10 Description The issue allows remote attackers to conduct phishing attacks via a crafted web site, as it follows Internet shortcuts referenced by a 1 IMG element or 2 other inline element. This has been exploited i...

VulnCheck KEV: CVE-2012-6467

Opera before 12.10 follows Internet shortcuts that are referenced by a 1 IMG element or 2 other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012...

CVE-2012-6463: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an unspecified sequence of loading of documents and loading of data: URLs...