CVE-2012-4144

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM elements, which makes it easier for remote attackers to bypass cross-site scripting XSS protection mechanisms via a crafted HTML document...

Gentoo Security Advisory GLSA 201209-11 (opera)

The remote host is missing updates announced in advisory GLSA 201209-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2012-4144

Opera is vulnerable to cross-site scripting due to improper escaping in DOM elements. The affected versions are Opera on Windows/UNIX older than 12.01 and on Mac OS X older than 11.66, with 12.x prior to 12.01 also affected. Root cause: failure to escape characters in DOM elements within crafted ...