4492 matches found
CVE-2012-1930
Opera before 11.62 on UNIX uses world-readable permissions for temporary files during printing, which allows local users to obtain sensitive information by reading these files...
CVE-2012-1925
Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for user-assisted remote attackers to trick users into downloading and executing arbitrary files via a download dialog located under other windows...
CVE-2012-1924
Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog...
CVE-2012-1926
CVE-2012-1926 affects the Opera web browser prior to 11.62. The issue arises when using the History API (history.pushState/history.replaceState) in conjunction with cross-domain frames, bypassing the Same Origin Policy and enabling unintended read access to history.state. The vulnerability is doc...
CVE-2012-1928
The CVE-2012-1928 entry concerns Opera before 11.62. The vulnerability allows remote attackers to spoof the address bar by triggering a page reload followed by a redirect to a different domain. Connected sources confirm Opera 11.62 as the fix/version that mitigates this issue. Affected component:...
CVE-2012-1931
Opera before 11.62 on UNIX is vulnerable to a local symlink attack during printing, allowing local users to overwrite arbitrary files via a temporary file. Affected condition involves usage with an unspecified printing application. The vulnerability could enable manipulation of files with the pri...
CVE-2012-1930
Opera for UNIX precedes version 11.62 and stores temporary print files with world-readable permissions, enabling a local user to read sensitive information. Affected: Opera on UNIX; Root cause: insecure permissions on temporary print files. Impact: information disclosure at local level. Remediati...
CVE-2012-1925
CVE-2012-1925 affects Opera before 11.62. The dialog window stacking order could fail to stay on top of content windows, enabling a user‑assisted remote attacker to trick users into downloading and executing arbitrary files via a download dialog that is placed under other windows. Affected produc...
Opera < 11.62 Multiple Vulnerabilities
Binary data 800859.prm...
Opera < 11.62 Multiple Vulnerabilities
Binary data 6399.prm...
History.state can leak the state data from cross domain pages – Opera Security Advisories
When a site uses history.pushState and history.replaceState to add or replace history entries, it can also provide optional data, which may typically be used to restore the given state when the user navigates through their browser history. When pages with cross-domain frames use this functionalit...
Overlapping content can trick users into executing downloads – Opera Security Advisories
Dialogs such as the download dialog are usually displayed on top of page content, to ensure that the user knows that the dialog is requesting attention. In some cases, this policy was not implemented correctly in Opera, allowing certain page content to overlay the dialog. In these cases, clicking...
Web page dialogs can be used to to display the wrong address in the address field – Opera Security Advisories
The address field should always show the correct address for the page that is loaded. If a page can cause Opera to display certain dialogs relating to a target site, the dialog may in some cases cause Opera to display the target site’s address instead of the correct address. This can allow an...
Overlapping content can trick users into executing downloads
Dialogs such as the download dialog are usually displayed on top of page content, to ensure that the user knows that the dialog is requesting attention. In some cases, this policy was not implemented correctly in Opera, allowing certain page content to overlay the dialog. In these cases, clicking...
Web page dialogs can be used to to display the wrong address in the address field
The address field should always show the correct address for the page that is loaded. If a page can cause Opera to display certain dialogs relating to a target site, the dialog may in some cases cause Opera to display the target site's address instead of the correct address. This can allow an...
Web page content may overlap the address field
The browser's user interface contains several pieces of security information. To preserve this information correctly, web page content should not be able to display over the user interface. Certain styling can cause Opera to allow the content to be displayed outside the page, over the address...
Printing issue can allow data leaks to other system users, or allow them to corrupt data
When pages are printed by Opera, a temporary file is created, which contains the document to print. This document is not created with the correct permissions, allowing other users of the system to read its contents. When printed with certain popular printing frameworks, an additional temporary fi...
Carefully timed reloads and redirects can spoof the address field – Opera Security Advisories
The address field should always show the address of the page that is being displayed. In certain cases, if a target site responds slowly, reloading an attacking page and redirecting to the target page can cause the address field to show the target site’s address, while the attacking site is still...
Small windows can be used to trick users into executing downloads – Opera Security Advisories
When the download dialog is displayed, it should always be visible to the user, to ensure that the user realizes it is there. If the dialog is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can end...
FreeBSD Ports: opera, linux-opera
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...