CVE-2012-3560

CVE-2012-3560 affects Opera before 11.65. The issue is that the address bar may not correspond to the displayed page during blocked navigation, enabling remote spoofing attacks. Connected sources (Red Hat advisory, Opera changelogs) confirm the vulnerability in Opera prior to 11.65 and indicate t...

CVE-2012-3555

Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary code via a crafted web site, related to a "hidden keyboard navigation" issue...

CVE-2012-3558

Opera before 11.65 is affected by CVE-2012-3558. The vulnerability arises because the address bar may not correspond to the displayed page during unusually timed changes, enabling user-assisted spoofing via navigation, reloads, and redirects. Connected sources corroborate multiple vulnerabilities...

CVE-2012-3558

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects...

CVE-2012-3567

CVE-2012-3567 affects Opera before 12.00 Beta. The vulnerability is triggered via an IFRAME element using src="#" to embed a parent document, leading to memory consumption or an application hang (denial of service). The available connected documents confirm the same description and CVSS metrics (...

CVE-2012-3557

Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site...

CVE-2012-3564

Opera before 12.00 Beta allows remote attackers to cause a denial of service application hang via an absolutely positioned wrap=off TEXTAREA element located next to an "overflow: auto" block element...

CVE-2012-3556

Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which makes it easier for user-assisted remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary code via a crafted web site...

CVE-2012-3557

CVE-2012-3557 affects Opera prior to 11.65. The issue is improper restriction in reading JSON strings, enabling a crafted site to trigger cross-domain loading of JSON resources and potentially disclose sensitive information. The vulnerability is associated with Opera’s JSON handling; affected pla...

PT-2012-4817

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.00 Beta Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via crafted WebGL content. This has been demonstrated by a codeflow.org WebGL demo. Recommendatio...

CVE-2012-3555: Undefined Security Weakness

Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary code via a crafted web site, related to a "hidden keyboard navigation" issue...

CVE-2012-3562: Undefined Security Weakness

Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service application crash via a crafted web page that is not properly handled during a reload, as demonstrated by a "multiple origin camera test" page...

CVE-2012-3565: Undefined Security Weakness

Opera before 12.00 Beta allows remote attackers to cause a denial of service application crash via crafted characters in domain names, as demonstrated by "IDNA2008 tests."...

PT-2012-4812

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.00 Beta Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by visiting a web page that contains invalid character encodings. Recommendations For Opera...

PT-2012-4807

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.65 Description The issue allows remote attackers to perform cross-domain loading of JSON resources and obtain sensitive information via a crafted web site, due to improper restriction of JSON string reading...

PT-2012-4814

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.00 Beta Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by using crafted characters in domain names. This has been demonstrated through "IDNA2008 tests."...

CVE-2012-3563: Undefined Security Weakness

Opera before 12.00 Beta allows remote attackers to cause a denial of service application crash via a web page that contains invalid character encodings...

PT-2012-4813

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.00 Beta Description The issue allows remote attackers to cause a denial of service, resulting in an application hang. This occurs when an absolutely positioned wrap=off TEXTAREA element is located next to an "overflo...

CVE-2012-3560: Undefined Security Weakness

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it easier for remote attackers to conduct spoofing attacks by detecting and preventing attempts to load a different web page...

CVE-2012-3561: Improper Restriction of Operations within the Bounds of a Memory Buffer

Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted string...