CVE-2012-1929: Improper Input Validation

Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security dialogs via crafted styling that causes page content to be displayed outside of the intended content area...

CVE-2012-1925: Undefined Security Weakness

Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for user-assisted remote attackers to trick users into downloading and executing arbitrary files via a download dialog located under other windows...

CVE-2012-1928: Improper Input Validation

Opera before 11.62 allows remote attackers to spoof the address field by triggering a page reload followed by a redirect to a different domain...

Opera < 11.62 Multiple Vulnerabilities

Binary data 6399.prm...

Opera < 11.62 Multiple Vulnerabilities

Binary data 800859.prm...

PT-2012-3663

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 on UNIX Description The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file during printing, when used in conjunction with an unspecified printing application...

PT-2012-3662

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows local users to obtain sensitive information by reading temporary files created during printing, due to the use of world-readable permissions for these files. Recommendations For Opera...

PT-2012-3661

Name of the Vulnerable Software and Affected Versions Opera version 11.62 and earlier on Mac OS X Description The issue allows remote attackers to spoof the address field and security dialogs. This is achieved through crafted styling that causes page content to be displayed outside of the intende...

PT-2012-3659

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows remote attackers to spoof the address field. This is achieved by triggering the launch of a dialog window associated with a different domain. Recommendations For Opera versions prior t...

PT-2012-3657

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue makes it easier for remote attackers to trick users into downloading and executing arbitrary files. This is due to the dialog window not being placed on top of content windows, allowing it to...

PT-2012-3660

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows remote attackers to spoof the address field. This is achieved by triggering a page reload followed by a redirect to a different domain. Recommendations For Opera versions prior to 11.6...

PT-2012-3656

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows user-assisted remote attackers to trick users into downloading and executing arbitrary files. This is achieved via a small window for the download dialog, which can be exploited to...

PT-2012-3658

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows remote attackers to bypass the Same Origin Policy via the history.pushState and history.replaceState functions in conjunction with cross-domain frames, leading to unintended read acces...

Web page dialogs can be used to to display the wrong address in the address field

The address field should always show the correct address for the page that is loaded. If a page can cause Opera to display certain dialogs relating to a target site, the dialog may in some cases cause Opera to display the target site's address instead of the correct address. This can allow an...

Printing issue can allow data leaks to other system users, or allow them to corrupt data

When pages are printed by Opera, a temporary file is created, which contains the document to print. This document is not created with the correct permissions, allowing other users of the system to read its contents. When printed with certain popular printing frameworks, an additional temporary fi...

Overlapping content can trick users into executing downloads

Dialogs such as the download dialog are usually displayed on top of page content, to ensure that the user knows that the dialog is requesting attention. In some cases, this policy was not implemented correctly in Opera, allowing certain page content to overlay the dialog. In these cases, clicking...

Web page content may overlap the address field

The browser's user interface contains several pieces of security information. To preserve this information correctly, web page content should not be able to display over the user interface. Certain styling can cause Opera to allow the content to be displayed outside the page, over the address...

Carefully timed reloads and redirects can spoof the address field – Opera Security Advisories

The address field should always show the address of the page that is being displayed. In certain cases, if a target site responds slowly, reloading an attacking page and redirecting to the target page can cause the address field to show the target site’s address, while the attacking site is still...

Web page dialogs can be used to to display the wrong address in the address field – Opera Security Advisories

The address field should always show the correct address for the page that is loaded. If a page can cause Opera to display certain dialogs relating to a target site, the dialog may in some cases cause Opera to display the target site’s address instead of the correct address. This can allow an...

History.state can leak the state data from cross domain pages – Opera Security Advisories

When a site uses history.pushState and history.replaceState to add or replace history entries, it can also provide optional data, which may typically be used to restore the given state when the user navigates through their browser history. When pages with cross-domain frames use this functionalit...