CVE-2011-4687

CVE-2011-4687 affects Opera before 11.60. The issue is a remote denial-of-service vulnerability caused by processing unspecified content on a web page (demonstrated via a Cisco homepage page), leading to CPU and memory consumption. Public documents identify Opera 11.60 as the fixed version; OpenV...

CVE-2011-4681: Undefined Security Weakness

Opera before 11.60 does not properly consider the number of . dot characters that conventionally exist in domain names of different top-level domains, which allows remote attackers to bypass the Same Origin Policy by leveraging access to a different domain name in the same top-level domain, as...

CVE-2011-4686: Undefined Security Weakness

Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a denial of service application crash via unknown vectors...

CVE-2011-4684: Undefined Security Weakness

Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases."...

CVE-2011-4685: Improper Input Validation

Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service application crash via unspecified content on a web page, as demonstrated by forbes.com...

CVE-2011-4687: Undefined Security Weakness

Opera before 11.60 allows remote attackers to cause a denial of service CPU and memory consumption via unspecified content on a web page, as demonstrated by a page under the cisco.com home page...

CVE-2010-5068: Exposure of Sensitive Information to an Unauthorized Actor

The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...

CVE-2010-5072: Undefined Security Weakness

The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method...

CVE-2011-4690: Undefined Security Weakness

Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code...

CVE-2011-4682: Undefined Security Weakness

The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites...

CVE-2011-4683: Undefined Security Weakness

Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue."...

PT-2011-5032

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60 Description The issue is related to an unspecified vulnerability in the Web Workers implementation, allowing remote attackers to cause a denial of service, resulting in an application crash, via unknown vectors...

PT-2011-5036

Name of the Vulnerable Software and Affected Versions Opera versions 11.60 and earlier Description The issue allows remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code, making it easier for them to gather information about the browser's cache...

PT-2011-5028

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60 Description The issue is related to the improper implementation of the in operator in the JavaScript engine, allowing remote attackers to bypass the Same Origin Policy. This can be achieved via vectors related to...

PT-2011-5027

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60 Description The issue allows remote attackers to bypass the Same Origin Policy by leveraging access to a different domain name in the same top-level domain. This can be demonstrated by the .no or .uk domain, where...

PT-2011-2002

Name of the Vulnerable Software and Affected Versions Opera version 10.5 Description The issue concerns the JavaScript implementation in Opera, which does not properly restrict the set of values contained in the object returned by the getComputedStyle method. This allows remote attackers to obtai...

PT-2011-1998

Name of the Vulnerable Software and Affected Versions Opera version 10.5 Description The CSS implementation does not properly handle the :visited pseudo-class, allowing remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. Recommendations For Opera...

Opera < 11.60 Multiple Vulnerabilities

Binary data 6105.prm...

Opera < 11.60 Multiple Vulnerabilities

Binary data 800845.prm...

PT-2011-5033

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60 Description The issue allows remote attackers to cause a denial of service, consuming CPU and memory resources via unspecified content on a web page. Recommendations For Opera versions prior to 11.60, update to...