CVE-2012-6472

CVE-2012-6472 affects Opera on UNIX: Opera before 12.12 uses weak permissions on the profile directory, allowing local users to read sensitive files (cache, password, configuration) and potentially modify configuration to gain privileges. Existence of related entries confirms the issue across mul...

CVE-2012-6460

CVE-2012-6460 affects Opera browser versions before 11.67 and 12.x before 12.02, where a crafted web site can truncate a dialog and potentially trigger downloading and execution of arbitrary programs. Connected sources confirm this is a browser-level vulnerability with remote code execution impli...

CVE-2012-6469

Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error page...

CVE-2012-6460

Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site...

CVE-2012-6466

CVE-2012-6466 affects Opera before 12.10, where improper handling of incorrect size data in a WebP image can cause a crafted image used as a fill pattern for a canvas to disclose potentially sensitive information from the process memory. The vulnerability enables memory information disclosure via...

CVE-2012-6467

CVE-2012-6467 is confirmed to affect Opera (pre-12.10) via how it follows Internet shortcuts referenced by an IMG or inline element, enabling phishing-style attacks on crafted pages (described as exploited in the wild in 2012). OpenVAS entries map this family of vulnerabilities to a high base sco...

CVE-2012-6461

Opera: CVE-2012-6461 concerns the X.509 certificate-validation in Opera’s HTTPS implementation. Affected: Opera before 12.10. Description: remote attackers could cause a false indication of revocation-status success by triggering a failure of a single checking service. Mitigation: upgrade to a ne...

CVE-2012-6470

Opera before 12.12 is vulnerable to a memory allocation issue when processing GIF images, which can allow remote code execution or memory overwrite leading to a denial of service. Affected software: Opera browser (multiple OS variants) prior to version 12.12. Root cause: improper memory allocatio...

CVE-2012-6470

Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary code or cause a denial of service memory overwrite via a malformed image...

CVE-2012-6471

Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP requests...

CVE-2012-6464

Cross-site scripting XSS vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript code that overrides methods of unspecified native objects in documents that have different origins...

CVE-2012-6467

Opera before 12.10 follows Internet shortcuts that are referenced by a 1 IMG element or 2 other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012...

PT-2013-1956

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.10 Description The issue arises from improper handling of incorrect size data in a WebP image, allowing remote attackers to obtain potentially sensitive information from process memory. This can be achieved by using ...

CVE-2012-6471: Undefined Security Weakness

Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP requests...

CVE-2012-6463: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an unspecified sequence of loading of documents and loading of data: URLs...

PT-2013-1958

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.12 Description The issue allows local users to obtain sensitive information by reading cache, password, or configuration files due to weak permissions for the profile directory. It may also be possible for local user...

PT-2013-1953

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.67 Opera versions 12.x prior to 12.02 Description The issue allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site...

CVE-2012-6460: Undefined Security Weakness

Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site...

PT-2013-1955

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.10 Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript code, specifically by overriding methods of native objects in documents that have different origins. This...

CVE-2012-6468: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a long HTTP response...