CVE-2012-3563

Opera before 12.00 Beta allows remote attackers to cause a denial of service application crash via a web page that contains invalid character encodings...

CVE-2012-3568

Opera before 12.00 Beta allows remote attackers to cause a denial of service application crash via crafted WebGL content, as demonstrated by a codeflow.org WebGL demo...

CVE-2012-3567

Opera before 12.00 Beta allows remote attackers to cause a denial of service memory consumption or application hang via an IFRAME element that uses the src="" syntax to embed a parent document...

CVE-2012-3558

Opera before 11.65 is affected by CVE-2012-3558. The vulnerability arises because the address bar may not correspond to the displayed page during unusually timed changes, enabling user-assisted spoofing via navigation, reloads, and redirects. Connected sources corroborate multiple vulnerabilities...

CVE-2012-3565

CVE-2012-3565 affects Opera prior to 12.00 Beta. The vulnerability allows remote attackers to cause an application crash (denial of service) by supplying crafted characters in domain names, as demonstrated by IDNA2008 tests. Multiple security repositories (NVD, OpenVAS entries) corroborate a MEDI...

CVE-2012-3559

Unspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors, related to a "moderate severity issue."...

CVE-2012-3560

CVE-2012-3560 affects Opera before 11.65. The issue is that the address bar may not correspond to the displayed page during blocked navigation, enabling remote spoofing attacks. Connected sources (Red Hat advisory, Opera changelogs) confirm the vulnerability in Opera prior to 11.65 and indicate t...

CVE-2012-3557

CVE-2012-3557 affects Opera prior to 11.65. The issue is improper restriction in reading JSON strings, enabling a crafted site to trigger cross-domain loading of JSON resources and potentially disclose sensitive information. The vulnerability is associated with Opera’s JSON handling; affected pla...

CVE-2012-3556

Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which makes it easier for user-assisted remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary code via a crafted web site...

CVE-2012-3561

Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted string...

CVE-2012-3562

Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service application crash via a crafted web page that is not properly handled during a reload, as demonstrated by a "multiple origin camera test" page...

Opera 12 Local Arbitrary Download

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Cross-domain JSON resources may be exposed as JavaScript variable data

JSON strings are sometimes exported by sites as a resource that cannot be read cross-domain, and may contain confidential data. The format of a JSON string ensures that it cannot be read as the contents of a variable, if it is included as a normal script. In some cases, Opera does not correctly...

Opera 'X.509' Certificates Spoofing Vulnerability - Windows

Opera is prone to spoofing vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.802435";...

Cross-domain JSON resources may be exposed as JavaScript variable data – Opera Security Advisories

JSON strings are sometimes exported by sites as a resource that cannot be read cross-domain, and may contain confidential data. The format of a JSON string ensures that it cannot be read as the contents of a variable, if it is included as a normal script. In some cases, Opera does not correctly...

Opera 'X.509' Certificates Spoofing Vulnerability - Linux

Opera is prone to a spoofing vulnerability SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.802436...

Opera 'X.509' Certificates Spoofing Vulnerability (Linux)

The host is installed with Opera and is prone to spoofing vulnerability OpenVAS Vulnerability Test $Id: gboperax509certspoofingvulnlin.nasl 5888 2017-04-07 09:01:53Z teissa $ Opera 'X.509' Certificates Spoofing Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2012 Greenbone Network...

Opera 'X.509' Certificates Spoofing Vulnerability (Windows)

The host is installed with Opera and is prone to spoofing vulnerability OpenVAS Vulnerability Test $Id: gboperax509certspoofingvulnwin.nasl 5999 2017-04-21 09:02:32Z teissa $ Opera 'X.509' Certificates Spoofing Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2012 Greenbone...

Opera 'X.509' Certificates Spoofing Vulnerability (Mac OS X)

The host is installed with Opera and is prone to spoofing vulnerability OpenVAS Vulnerability Test $Id: gboperax509certspoofingvulnmacosx.nasl 5956 2017-04-14 09:02:12Z teissa $ Opera 'X.509' Certificates Spoofing Vulnerability Mac OS X Authors: Antu Sanadi Copyright: Copyright c 2012 Greenbone...

Hidden keyboard navigation can allow cross site scripting or code execution – Opera Security Advisories

When a user is interacting with a window, that window should be visible to the user, to ensure that the user realizes it is there. If a page is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can en...