4492 matches found
CVE-2012-6470
Opera before 12.12 is vulnerable to a memory allocation issue when processing GIF images, which can allow remote code execution or memory overwrite leading to a denial of service. Affected software: Opera browser (multiple OS variants) prior to version 12.12. Root cause: improper memory allocatio...
CVE-2012-6466
Opera before 12.10 does not properly handle incorrect size data in a WebP image, which allows remote attackers to obtain potentially sensitive information from process memory by using a crafted image as the fill pattern for a canvas...
CVE-2012-6464
Cross-site scripting XSS vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript code that overrides methods of unspecified native objects in documents that have different origins...
CVE-2012-6471
Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP requests...
CVE-2012-6462
Opera before 12.10 does not properly implement the Cross-Origin Resource Sharing CORS specification, which allows remote attackers to bypass intended page-content restrictions via a crafted request...
CVE-2012-6468
CVE-2012-6468 is described in the initial document as a heap-based buffer overflow in Opera (pre-12.11) that could be triggered by a long HTTP response, allowing remote code execution or memory corruption. Connected openvas entries corroborate multiple Opera vulnerabilities around the same period...
CVE-2012-6465
Opera before 12.10 is vulnerable to remote code execution or application crash via a malformed SVG image (CVE-2012-6465). The CVE is referenced in multiple sources (Red Hat security advisory, GLSA 201406-14, OpenVAS entries) that describe the vulnerability as part of a set of Opera issues with hi...
CVE-2012-6465
Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed SVG image...
CVE-2012-6463
CVE-2012-6463 is an XSS vulnerability in Opera prior to 12.10 where an attacker could inject arbitrary script via a sequence involving loading documents and data: URLs. The NVD entry assigns a base score of 4.3 (Medium) with No confidentiality impact, Partial integrity impact, and No availability...
VulnCheck KEV: CVE-2012-6467
Opera before 12.10 follows Internet shortcuts that are referenced by a 1 IMG element or 2 other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012...
FreeBSD : otrs -- XSS vulnerability in Firefox and Opera (95a69d1a-52a5-11e2-a289-1c4bd681f0cf)
OTRS Security Advisory reports : This advisory covers vulnerabilities discovered in the OTRS core system. This is a variance of the XSS vulnerability, where an attacker could send a specially prepared HTML email to OTRS which would cause JavaScript code to be executed in your browser while...
Firefox/Chrome/Chromium Multiple Web Browsers (Memory Exhaustion)
This is a very stupid bug that can fill the memory and processor simply by entering a URL with a specially crafted web server The Evil Server This bug is based on an incorrect parsing of HTTP responses with "Connection: Keep-Alive" in ... basically all web browsers xD Chrome Firefox Chromium Lynx...
CVE-2012-5180
The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application...
Code injection
The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application...
CVE-2012-5180
The CVE-2012-5180 issue affects Opera Mini for Android versions prior to 7.5 and Opera Mobile for Android versions prior to 12.1. The vulnerability arises from improper handling/implementation of the WebView class, enabling information disclosure when a user runs a crafted malicious Android appli...
CVE-2012-5180
The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application...
Opera < 12.12 Multiple Vulnerabilities
Binary data 800107.prm...
Opera < 12.12 Multiple Vulnerabilities
Binary data 800849.prm...
