Opera Multiple Vulnerabilities - August12 (Windows)

This host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnaug12win.nasl 5963 2017-04-18 09:02:14Z teissa $ Opera Multiple Vulnerabilities - August12 Windows Authors: Rachana Shetty Copyright: Copyright c 2012 Greenbone Networks GmbH...

Opera Multiple Vulnerabilities (Aug 2012) - Windows

Opera is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Multiple Vulnerabilities - August12 (Mac OS X)

This host is installed with Opera and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gboperashowpagedosvulnmacosx.nasl 6022 2017-04-25 12:51:04Z teissa $ Opera Lenovo 'Show Page' Denial Of Service Vulnerability - Mac OS X Authors: Rachana Shetty Copyright: Copyright ...

CVE-2012-4145

Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown impact and attack vectors, related to a "low severity issue."...

CVE-2012-4143

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog, a different vulnerability than CVE-2012-1924...

CVE-2012-4146

Opera before 12.01 allows remote attackers to cause a denial of service application crash via a crafted web site, as demonstrated by the Lenovo "Shop now" page...

CVE-2012-4144

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM elements, which makes it easier for remote attackers to bypass cross-site scripting XSS protection mechanisms via a crafted HTML document...

CVE-2012-4142

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, ignores some characters in HTML documents in unspecified circumstances, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted document...

Code injection

Opera before 12.01 allows remote attackers to cause a denial of service application crash via a crafted web site, as demonstrated by the Lenovo "Shop now" page...

Design/Logic Flaw

Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown impact and attack vectors, related to a "low severity issue."...

Design/Logic Flaw

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog, a different vulnerability than CVE-2012-1924...

Cross site scripting

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM elements, which makes it easier for remote attackers to bypass cross-site scripting XSS protection mechanisms via a crafted HTML document...

Cross site scripting

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, ignores some characters in HTML documents in unspecified circumstances, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted document...

CVE-2012-4143

Opera < 12.01 on Windows/UNIX and = 12.01.1532) as remediation. No explicit root cause details are provided beyond the dialog-based delivery vector in the sources.

CVE-2012-4142

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, ignores some characters in HTML documents in unspecified circumstances, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted document...

CVE-2012-4146

Opera is affected by CVE-2012-4146 (and related 2012-41xx CVEs) on multiple platforms. The issue allows a remote attacker to cause an application crash (DoS) by visiting a crafted web page, as demonstrated by the Lenovo “Shop now” page. The vulnerability affects Opera before 12.01, with the Mac O...

CVE-2012-4143

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog, a different vulnerability than CVE-2012-1924...

CVE-2012-4142

Opera’s CVE-2012-4142 affects multiple platforms: Windows/UNIX builds before 12.01 and Mac OS X builds before 11.66 (and before 12.01 for 12.x lines). The flaw arises from Opera’s HTML parsing, which ignores some characters under unspecified circumstances, enabling remote XSS via crafted document...

CVE-2012-4145

Opera CVE-2012-4145 concerns multiple vulnerabilities in Opera prior to 12.01 on Windows and UNIX, and prior to 11.66 and 12.x prior to 12.01 on macOS. Public records from OpenVAS, Red Hat SCM, Gentoo GLSA, and Gentoo Nessus entries describe the issue as high-severity with CVSS base score 10.0 (A...

CVE-2012-4144

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM elements, which makes it easier for remote attackers to bypass cross-site scripting XSS protection mechanisms via a crafted HTML document...