4492 matches found
CVE-2012-3565
Opera before 12.00 Beta allows remote attackers to cause a denial of service application crash via crafted characters in domain names, as demonstrated by "IDNA2008 tests."...
CVE-2012-3558
Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects...
CVE-2012-3567
Opera before 12.00 Beta allows remote attackers to cause a denial of service memory consumption or application hang via an IFRAME element that uses the src="" syntax to embed a parent document...
CVE-2012-3561
Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted string...
CVE-2012-3562
Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service application crash via a crafted web page that is not properly handled during a reload, as demonstrated by a "multiple origin camera test" page...
CVE-2012-3559
Unspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors, related to a "moderate severity issue."...
CVE-2012-3563
Opera before 12.00 Beta allows remote attackers to cause a denial of service application crash via a web page that contains invalid character encodings...
CVE-2012-3557
Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site...
Cross site scripting
Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site...
Buffer overflow
Opera before 12.00 Beta allows remote attackers to cause a denial of service application hang via an absolutely positioned wrap=off TEXTAREA element located next to an "overflow: auto" block element...
CVE-2012-3556
Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which makes it easier for user-assisted remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary code via a crafted web site...
Spoofing
Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it easier for remote attackers to conduct spoofing attacks by detecting and preventing attempts to load a different web page...
Code injection
Opera before 12.00 Beta allows remote attackers to cause a denial of service application crash via crafted WebGL content, as demonstrated by a codeflow.org WebGL demo...
Design/Logic Flaw
Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects...
Code injection
Opera before 12.00 Beta allows remote attackers to cause a denial of service memory consumption or application hang via an IFRAME element that uses the src="" syntax to embed a parent document...
CVE-2012-3555
Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary code via a crafted web site, related to a "hidden keyboard navigation" issue...
Memory corruption
Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted string...
Code injection
Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service application crash via a crafted web page that is not properly handled during a reload, as demonstrated by a "multiple origin camera test" page...
Design/Logic Flaw
Opera before 12.00 Beta allows remote attackers to cause a denial of service application crash via crafted characters in domain names, as demonstrated by "IDNA2008 tests."...