CVE-2013-1618

The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of...

CVE-2013-1618

Technical details specific to CVE-2013-1618 are not publicly provided in the supplied documents; related entries cite timing-side-channel issues linked to CVE-2013-0169 but do not detail this CVE.

CVE-2013-1618

The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of...

CVE-2013-1637

Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events...

CVE-2013-1639

Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request...

CVE-2013-1638

Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document...

Code injection

Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events...

Cross site request forgery (csrf)

Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request...

Code injection

Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document...

CVE-2013-1639

Opera before 12.13 fails to send CORS preflight requests in all required cases, allowing a remote attacker to bypass CSRF protection via a crafted site that triggers a CORS request. The connected Gentoo/OpenVAS entries corroborate Opera as the affected product and advise upgrading to Opera 12.13_...

CVE-2013-1639

Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request...

CVE-2013-1638

Opera before 12.13 is affected by CVE-2013-1638, allowing remote code execution via crafted SVG clipPaths. The connected advisories confirm the vulnerability in Opera and advise upgrading to a version containing the fix (e.g., Opera 12.13+). Remediation: upgrade to the latest Opera package that i...

CVE-2013-1637

Opera pre-12.13 is vulnerable to remote code execution via DOM event vectors (CVE-2013-1637). Connected sources (SUSE GLSA 201406-14 and OpenVAS entries) confirm affected package: Opera with vulnerabilities described as multiple DOM-event related flaws enabling arbitrary code execution. The OpenV...

CVE-2013-1638

Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document...

CVE-2013-1637

Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events...

Opera SVG Use After Free Vulnerability

Exploit for windows platform in category dos / poc !CDATA //Author=Cons0ul var b = new Array; // this is our spray function where spray is allocated on LFH with exact size 0x78 // so 0x78 size of block is created so far we are creating 0x50000 blocks // to create 0x78 blocks we are using...

Opera SVG - Use-After-Free

Opera SVG - Use-After-Free !CDATA //Author=Cons0ul var b = new Array; // this is our spray function where spray is allocated on LFH with exact size 0x78 // so 0x78 size of block is created so far we are creating 0x50000 blocks // to create 0x78 blocks we are using ArrayBuffer; function fengshui...

Opera SVG Use-After-Free

!CDATA //Author=Cons0ul var b = new Array; // this is our spray function where spray is allocated on LFH with exact size 0x78 // so 0x78 size of block is created so far we are creating 0x50000 blocks // to create 0x78 blocks we are using ArrayBuffer; function fengshui...

Opera SVG - Use-After-Free

!CDATA //Author=Cons0ul var b = new Array; // this is our spray function where spray is allocated on LFH with exact size 0x78 // so 0x78 size of block is created so far we are creating 0x50000 blocks // to create 0x78 blocks we are using ArrayBuffer; function fengshui...

FreeBSD : opera -- execution of arbitrary code (ea0f45e2-6c4b-11e2-98d9-003067c2616f)

Opera reports : Particular DOM event manipulations can cause Opera to crash. In some cases, this crash might occur in a way that allows execution of arbitrary code. To inject code, additional techniques would have to be employed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...