CVE-2011-4687

CVE-2011-4687 affects Opera before 11.60. The issue is a remote denial-of-service vulnerability caused by processing unspecified content on a web page (demonstrated via a Cisco homepage page), leading to CPU and memory consumption. Public documents identify Opera 11.60 as the fixed version; OpenV...

CVE-2010-5068: Exposure of Sensitive Information to an Unauthorized Actor

The Cascading Style Sheets CSS implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264...

PT-2011-1998

Name of the Vulnerable Software and Affected Versions Opera version 10.5 Description The CSS implementation does not properly handle the :visited pseudo-class, allowing remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. Recommendations For Opera...

PT-2011-5031

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via unspecified content on a web page. Recommendations For versions prior to 11.60, update to version...

PT-2011-5029

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60 Description The issue is related to a moderately severe problem, but the specific details about the impact and attack vectors are not provided. Recommendations For versions prior to 11.60, update to version 11.60 ...

PT-2011-5036

Name of the Vulnerable Software and Affected Versions Opera versions 11.60 and earlier Description The issue allows remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code, making it easier for them to gather information about the browser's cache...

PT-2011-5027

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60 Description The issue allows remote attackers to bypass the Same Origin Policy by leveraging access to a different domain name in the same top-level domain. This can be demonstrated by the .no or .uk domain, where...

CVE-2011-4690: Undefined Security Weakness

Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code...

CVE-2011-4686: Undefined Security Weakness

Unspecified vulnerability in the Web Workers implementation in Opera before 11.60 allows remote attackers to cause a denial of service application crash via unknown vectors...

CVE-2010-5072: Undefined Security Weakness

The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method...

PT-2011-5033

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60 Description The issue allows remote attackers to cause a denial of service, consuming CPU and memory resources via unspecified content on a web page. Recommendations For Opera versions prior to 11.60, update to...

CVE-2011-4687: Undefined Security Weakness

Opera before 11.60 allows remote attackers to cause a denial of service CPU and memory consumption via unspecified content on a web page, as demonstrated by a page under the cisco.com home page...

CVE-2011-4683: Undefined Security Weakness

Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue."...

PT-2011-5030

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60 Description The issue is related to the improper handling of certificate revocation, which has unspecified impact and remote attack vectors, particularly in "corner cases." Recommendations For Opera versions prior...

CVE-2011-4685: Improper Input Validation

Dragonfly in Opera before 11.60 allows remote attackers to cause a denial of service application crash via unspecified content on a web page, as demonstrated by forbes.com...

PT-2011-5028

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60 Description The issue is related to the improper implementation of the in operator in the JavaScript engine, allowing remote attackers to bypass the Same Origin Policy. This can be achieved via vectors related to...

CVE-2011-4681: Undefined Security Weakness

Opera before 11.60 does not properly consider the number of . dot characters that conventionally exist in domain names of different top-level domains, which allows remote attackers to bypass the Same Origin Policy by leveraging access to a different domain name in the same top-level domain, as...

PT-2011-2002

Name of the Vulnerable Software and Affected Versions Opera version 10.5 Description The issue concerns the JavaScript implementation in Opera, which does not properly restrict the set of values contained in the object returned by the getComputedStyle method. This allows remote attackers to obtai...

CVE-2011-4684: Undefined Security Weakness

Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases."...

Opera < 11.60 Multiple Vulnerabilities (BEAST)

The version of Opera installed on the remote Windows host is prior to 11.60. It is, therefore, affected by multiple vulnerabilities : - An unspecified error exists that can allow URL spoofing in the address bar. CVE-2011-4010 - Top level domain separation rules are not honored for two-letter top...