CVE-2012-1931

Opera before 11.62 on UNIX is vulnerable to a local symlink attack during printing, allowing local users to overwrite arbitrary files via a temporary file. Affected condition involves usage with an unspecified printing application. The vulnerability could enable manipulation of files with the pri...

CVE-2012-1925

CVE-2012-1925 affects Opera before 11.62. The dialog window stacking order could fail to stay on top of content windows, enabling a user‑assisted remote attacker to trick users into downloading and executing arbitrary files via a download dialog that is placed under other windows. Affected produc...

Opera < 11.62 Multiple Vulnerabilities

Binary data 800859.prm...

Opera < 11.62 Multiple Vulnerabilities

Binary data 6399.prm...

Web page dialogs can be used to to display the wrong address in the address field – Opera Security Advisories

The address field should always show the correct address for the page that is loaded. If a page can cause Opera to display certain dialogs relating to a target site, the dialog may in some cases cause Opera to display the target site’s address instead of the correct address. This can allow an...

History.state can leak the state data from cross domain pages – Opera Security Advisories

When a site uses history.pushState and history.replaceState to add or replace history entries, it can also provide optional data, which may typically be used to restore the given state when the user navigates through their browser history. When pages with cross-domain frames use this functionalit...

Overlapping content can trick users into executing downloads – Opera Security Advisories

Dialogs such as the download dialog are usually displayed on top of page content, to ensure that the user knows that the dialog is requesting attention. In some cases, this policy was not implemented correctly in Opera, allowing certain page content to overlay the dialog. In these cases, clicking...

Printing issue can allow data leaks to other system users, or allow them to corrupt data

When pages are printed by Opera, a temporary file is created, which contains the document to print. This document is not created with the correct permissions, allowing other users of the system to read its contents. When printed with certain popular printing frameworks, an additional temporary fi...

Overlapping content can trick users into executing downloads

Dialogs such as the download dialog are usually displayed on top of page content, to ensure that the user knows that the dialog is requesting attention. In some cases, this policy was not implemented correctly in Opera, allowing certain page content to overlay the dialog. In these cases, clicking...

Web page dialogs can be used to to display the wrong address in the address field

The address field should always show the correct address for the page that is loaded. If a page can cause Opera to display certain dialogs relating to a target site, the dialog may in some cases cause Opera to display the target site's address instead of the correct address. This can allow an...

Web page content may overlap the address field

The browser's user interface contains several pieces of security information. To preserve this information correctly, web page content should not be able to display over the user interface. Certain styling can cause Opera to allow the content to be displayed outside the page, over the address...

Carefully timed reloads and redirects can spoof the address field – Opera Security Advisories

The address field should always show the address of the page that is being displayed. In certain cases, if a target site responds slowly, reloading an attacking page and redirecting to the target page can cause the address field to show the target site’s address, while the attacking site is still...

Small windows can be used to trick users into executing downloads – Opera Security Advisories

When the download dialog is displayed, it should always be visible to the user, to ensure that the user realizes it is there. If the dialog is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can end...

FreeBSD Ports: opera, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: opera, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. VID a4a809d8-25c8-11e1-b531-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID a4a809d8-25c8-11e1-b531-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Opera Large Integer Argument Denial of Service Vulnerability (Mac OS X)

The host is installed with Opera and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gboperalargeintargdosvulnmacosx.nasl 5988 2017-04-20 09:02:29Z teissa $ Opera Large Integer Argument Denial of Service Vulnerability Mac OS X Authors: Rachana Shetty Copyright:...

Opera array index overflow

Integer overflows in array functions...

[CAL-2012-0004] opera array integer overflow

CAL-2012-0004 opera array integer overflow 1 Affected Products ================= 11.60 and prior 2 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com has discovered a integer overflow vulnerability in array functions like Int32Array,Int16Array... . Opear vendor sa...

Opera Large Integer Argument Denial of Service Vulnerability - Mac OS X

Opera is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Large Integer Argument Denial of Service Vulnerability - Windows

Opera is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...