Code injection

Opera before 12.00 Beta allows remote attackers to cause a denial of service application crash via a web page that contains invalid character encodings...

Design/Logic Flaw

Opera before 12.00 Beta allows remote attackers to cause a denial of service application crash via crafted characters in domain names, as demonstrated by "IDNA2008 tests."...

Spoofing

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it easier for remote attackers to conduct spoofing attacks by detecting and preventing attempts to load a different web page...

CVE-2012-3558

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects...

CVE-2012-3561

Opera before 11.64 is affected by CVE-2012-3561 due to improper memory allocation for URL strings, enabling remote code execution or memory corruption/DoS via a crafted string. Impact is high (CVSS v2 base 10.0). Remediation from the public record requires upgrading to Opera 11.64 or newer. Other...

CVE-2012-3559

CVE-2012-3559 concerns Opera on macOS before version 12.00 with an unspecified vulnerability that has unknown impact and attack vectors. The connected records consistently describe it as an "unspecified vulnerability" with a “moderate severity issue” and do not provide concrete exploit details, a...

CVE-2012-3560

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it easier for remote attackers to conduct spoofing attacks by detecting and preventing attempts to load a different web page...

CVE-2012-3557

Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site...

CVE-2012-3566

Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service application hang via JavaScript code that changes a form before submission...

CVE-2012-3564

Opera before 12.00 Beta allows remote attackers to cause a denial of service application hang via an absolutely positioned wrap=off TEXTAREA element located next to an "overflow: auto" block element...

CVE-2012-3555

Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary code via a crafted web site, related to a "hidden keyboard navigation" issue...

CVE-2012-3555

CVE-2012-3555 affects Opera before 11.65, where keyboard sequences may not be tied to a visible window, enabling user‑assisted remote attackers to perform cross‑site scripting or execute arbitrary code via a crafted page (hidden keyboard navigation). The OpenVAS and vendor notes corroborate Opera...

CVE-2012-3564

CVE-2012-3564 describes a denial-of-service condition in Opera prior to 12.00 Beta caused by a crafted absolutely positioned wrap=off TEXTAREA element placed next to an overflow: auto block. The vulnerability affects the rendering/input handling of a TEXTAREA and can cause the application to hang...

CVE-2012-3567

CVE-2012-3567 affects Opera before 12.00 Beta. The vulnerability is triggered via an IFRAME element using src="#" to embed a parent document, leading to memory consumption or an application hang (denial of service). The available connected documents confirm the same description and CVSS metrics (...

CVE-2012-3566

CVE-2012-3566 : Opera before 12.00 Beta is vulnerable to a denial-of-service via JavaScript that changes a form before submission, enabling a user-assisted remote trigger that can cause the application to hang. The available documents identify the affected product and the root cause (malformed or...

CVE-2012-3562

CVE-2012-3562 affects Opera before 12.00 Beta. The vulnerability arises from improper handling of a crafted web page during a reload, enabling a user‑assisted remote attacker to cause an application crash (DoS). The NVD description confirms the attacker requires user action and the impact is deni...

CVE-2012-3563

CVE-2012-3563 affects Opera browsers prior to 12.00 Beta. According to the sources, processing of a web page with invalid character encodings can cause the application to crash, constituting a remote denial of service. The CVSS v2 base score is 5.0 (Medium) with network access, low attack complex...

CVE-2012-3568

CVE-2012-3568 affects Opera prior to 12.00 Beta, where remote attackers could trigger a denial of service (application crash) by supplying crafted WebGL content (as demonstrated by a codeflow.org WebGL demo). The connected sources (OpenVAS entries and NVD record) corroborate a WebGL-related crash...

CVE-2012-3556

CVE-2012-3556 affects Opera before 11.65. A UI handling flaw allows opening a pop-up in response to the first click of a double-click action, enabling user-assisted remote XSS or arbitrary code execution via a crafted website. Affected: Opera desktop builds prior to 11.65 (per Red Hat advisory). ...

CVE-2012-3565

Opera before 12.00 Beta allows remote attackers to cause a denial of service application crash via crafted characters in domain names, as demonstrated by "IDNA2008 tests."...