CVE-2011-2626

Opera before 11.50 allows remote attackers to cause a denial of service application crash by using "injected script" to set the SRC attribute of an IFRAME element...

CVE-2011-2611

Unspecified vulnerability in the printing functionality in Opera before 11.50 allows user-assisted remote attackers to cause a denial of service application crash via a crafted web page...

CVE-2011-2639

Opera before version 11.10 is affected by a vulnerability where hidden animated GIF images trigger continual repaints, leading to CPU consumption and denial of service. The issue is documented across multiple sources (Red Hat security advisory and Gentoo GLSA 201206-03). Remediation in the public...

CVE-2011-2613

CVE-2011-2613 affects Opera browsers prior to 11.50. The vulnerability arises in the Array.prototype.join implementation when called on a non-array object that contains initial holes, enabling a remote attacker to cause an application crash (DoS). The issue is documented across multiple vendors/a...

CVE-2011-2623

Unspecified vulnerability in the SVG BiDi implementation in Opera before 11.50 allows remote attackers to cause a denial of service application crash or hang via unknown vectors...

CVE-2011-2632

Opera before 11.11 does not properly handle destruction of a Silverlight instance, which allows remote attackers to cause a denial of service application crash via a web page, as demonstrated by vod.onet.pl...

CVE-2011-2628

Opera is vulnerable in older releases, specifically before 11.11, due to improper handling of FRAMESET elements which can enable memory corruption leading to remote code execution or denial of service via page unload vectors. Public scans and advisories (GLSA 201206-03, Gentoo/Nessus/OpenVAS entr...

CVE-2011-2636

Summary: CVE-2011-2636 affects the Opera browser prior to 11.10 and could cause a denial of service (application crash) when processing unknown content on a web page, as illustrated by a Tomato Firmware page. The OpenVAS/Gentoo/SUSE/Red Hat entries corroborate multiple vendors’ advisories for Ope...

CVE-2011-2640

CVE-2011-2640 affects Opera before 11.10. An HTML document with an empty parameter value for an embedded Java applet could cause the browser to crash (remote denial of service). Remediation: upgrade to Opera 11.10 or newer as indicated by the referenced advisories.

CVE-2011-2618

Opera before 11.50 allows remote attackers to cause a denial of service application crash via web script that moves a 1 AUDIO element or 2 VIDEO element between windows...

CVE-2011-2617

Technical details for CVE-2011-2617 are not publicly provided in the supplied documents; the materials only reiterate an unspecified denial-of-service vulnerability in Opera before 11.50. Monitor for updates.

CVE-2011-2614

The SVG implementation in Opera before 11.50 allows remote attackers to cause a denial of service application crash via vectors involving a path on which many characters are drawn...

CVE-2011-2633

Opera browser contains a vulnerability tracked as CVE-2011-2633 (part of a set of Opera CVEs in 2011) where processing a Certificate Revocation List (CRL) file can cause an application crash resulting in denial of service. The initial entry specifies Opera before 11.11; Gentoo GLSA 201206-03 and ...

CVE-2011-2626

CVE-2011-2626 affects Opera browsers prior to 11.50, where an injected script could set the SRC attribute of an IFRAME, causing an application crash (DoS). Multiple vendor advisories reiterate the issue and reference Opera’s fixed release paths. Affected: Opera before 11.50; Impact: denial of ser...

CVE-2011-2610

CVE-2011-2610 is an Opera browser vulnerability affecting versions before 11.50, described as an unspecified issue with unknown impact and attack vectors. The CVSS metrics in the initial record indicate a high-risk, network-exploitable flaw (AV:N/AC:L/Au:N/C:C/I:C/A:C; base score 10.0). Public ma...

CVE-2011-1337

CVE-2011-1337 affects Opera before 11.50, where remote attackers could cause a denial of service (disk consumption) by triggering error pages from invalid URLs. Mitigation documented by Gentoo/OpenVAS advisories: upgrade to Opera 12.00.x or later (e.g., >= www-client/opera-12.00.1467). Technic...

CVE-2011-2609

CVE-2011-2609 affects Opera before 11.50, where data: URIs were not properly restricted, enabling remote XSS via crafted websites. This is confirmed across multiple advisories (SUSE, Gentoo GLSAs, OpenVAS plugins) citing Opera’s data: URI handling as the root cause. Impact is cross-site scripting...

CVE-2011-2609

Opera before 11.50 does not properly restrict data: URIs, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted web site...

CVE-2011-2634

Opera before 11.10 allows remote attackers to hijack 1 searches and 2 customizations via unspecified third party applications...

CVE-2011-2620

CVE-2011-2620 concerns Opera before version 11.50, where an unspecified vulnerability in SVG animation could be exploited by remote attackers to cause the application to crash (DoS). The connected documents consistently describe Opera’s SVG animation vectors as the weakness, with multiple entries...