CVE-2013-1637

Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events...

CVE-2013-1639

Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request...

Code injection

Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events...

Code injection

Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document...

Cross site request forgery (csrf)

Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request...

CVE-2013-1639

Opera before 12.13 fails to send CORS preflight requests in all required cases, allowing a remote attacker to bypass CSRF protection via a crafted site that triggers a CORS request. The connected Gentoo/OpenVAS entries corroborate Opera as the affected product and advise upgrading to Opera 12.13_...

CVE-2013-1637

Opera pre-12.13 is vulnerable to remote code execution via DOM event vectors (CVE-2013-1637). Connected sources (SUSE GLSA 201406-14 and OpenVAS entries) confirm affected package: Opera with vulnerabilities described as multiple DOM-event related flaws enabling arbitrary code execution. The OpenV...

CVE-2013-1637

Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events...

CVE-2013-1638

Opera before 12.13 is affected by CVE-2013-1638, allowing remote code execution via crafted SVG clipPaths. The connected advisories confirm the vulnerability in Opera and advise upgrading to a version containing the fix (e.g., Opera 12.13+). Remediation: upgrade to the latest Opera package that i...

CVE-2013-1639

Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request...

CVE-2013-1638

Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document...

CVE-2013-1638: Improper Control of Generation of Code

Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document...

CVE-2013-1639: Cross-Site Request Forgery (CSRF)

Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request...

CVE-2013-1637: Improper Control of Generation of Code

Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events...

PT-2013-3291

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.13 Description The issue allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request, due to Opera not sending CORS preflight requests in all required cases...

PT-2013-3281

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.13 Description The issue is related to the TLS implementation, which does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding. This allows remote...

CVE-2013-1618: Undefined Security Weakness

The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of...

Opera SVG Use-After-Free

!CDATA //Author=Cons0ul var b = new Array; // this is our spray function where spray is allocated on LFH with exact size 0x78 // so 0x78 size of block is created so far we are creating 0x50000 blocks // to create 0x78 blocks we are using ArrayBuffer; function fengshui...

Opera SVG Use After Free Vulnerability

Exploit for windows platform in category dos / poc !CDATA //Author=Cons0ul var b = new Array; // this is our spray function where spray is allocated on LFH with exact size 0x78 // so 0x78 size of block is created so far we are creating 0x50000 blocks // to create 0x78 blocks we are using...

Opera SVG - Use-After-Free

Opera SVG - Use-After-Free !CDATA //Author=Cons0ul var b = new Array; // this is our spray function where spray is allocated on LFH with exact size 0x78 // so 0x78 size of block is created so far we are creating 0x50000 blocks // to create 0x78 blocks we are using ArrayBuffer; function fengshui...