Opera < 11.62 Multiple Vulnerabilities

Binary data 800859.prm...

PT-2012-3662

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows local users to obtain sensitive information by reading temporary files created during printing, due to the use of world-readable permissions for these files. Recommendations For Opera...

CVE-2012-1929: Improper Input Validation

Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security dialogs via crafted styling that causes page content to be displayed outside of the intended content area...

CVE-2012-1930: Undefined Security Weakness

Opera before 11.62 on UNIX uses world-readable permissions for temporary files during printing, which allows local users to obtain sensitive information by reading these files...

PT-2012-3661

Name of the Vulnerable Software and Affected Versions Opera version 11.62 and earlier on Mac OS X Description The issue allows remote attackers to spoof the address field and security dialogs. This is achieved through crafted styling that causes page content to be displayed outside of the intende...

CVE-2012-1928: Improper Input Validation

Opera before 11.62 allows remote attackers to spoof the address field by triggering a page reload followed by a redirect to a different domain...

CVE-2012-1926: Exposure of Sensitive Information to an Unauthorized Actor

Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the 1 history.pushState and 2 history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information...

CVE-2012-1924: Improper Control of Generation of Code

Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog...

PT-2012-3658

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows remote attackers to bypass the Same Origin Policy via the history.pushState and history.replaceState functions in conjunction with cross-domain frames, leading to unintended read acces...

PT-2012-3657

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue makes it easier for remote attackers to trick users into downloading and executing arbitrary files. This is due to the dialog window not being placed on top of content windows, allowing it to...

PT-2012-3656

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows user-assisted remote attackers to trick users into downloading and executing arbitrary files. This is achieved via a small window for the download dialog, which can be exploited to...

PT-2012-3660

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows remote attackers to spoof the address field. This is achieved by triggering a page reload followed by a redirect to a different domain. Recommendations For Opera versions prior to 11.6...

PT-2012-3659

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows remote attackers to spoof the address field. This is achieved by triggering the launch of a dialog window associated with a different domain. Recommendations For Opera versions prior t...

Web page dialogs can be used to to display the wrong address in the address field

The address field should always show the correct address for the page that is loaded. If a page can cause Opera to display certain dialogs relating to a target site, the dialog may in some cases cause Opera to display the target site's address instead of the correct address. This can allow an...

Web page content may overlap the address field

The browser's user interface contains several pieces of security information. To preserve this information correctly, web page content should not be able to display over the user interface. Certain styling can cause Opera to allow the content to be displayed outside the page, over the address...

Overlapping content can trick users into executing downloads

Dialogs such as the download dialog are usually displayed on top of page content, to ensure that the user knows that the dialog is requesting attention. In some cases, this policy was not implemented correctly in Opera, allowing certain page content to overlay the dialog. In these cases, clicking...

Printing issue can allow data leaks to other system users, or allow them to corrupt data

When pages are printed by Opera, a temporary file is created, which contains the document to print. This document is not created with the correct permissions, allowing other users of the system to read its contents. When printed with certain popular printing frameworks, an additional temporary fi...

History.state can leak the state data from cross domain pages – Opera Security Advisories

When a site uses history.pushState and history.replaceState to add or replace history entries, it can also provide optional data, which may typically be used to restore the given state when the user navigates through their browser history. When pages with cross-domain frames use this functionalit...

Overlapping content can trick users into executing downloads – Opera Security Advisories

Dialogs such as the download dialog are usually displayed on top of page content, to ensure that the user knows that the dialog is requesting attention. In some cases, this policy was not implemented correctly in Opera, allowing certain page content to overlay the dialog. In these cases, clicking...

Small windows can be used to trick users into executing downloads – Opera Security Advisories

When the download dialog is displayed, it should always be visible to the user, to ensure that the user realizes it is there. If the dialog is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can end...