CVE-2012-4144

Opera is vulnerable to cross-site scripting due to improper escaping in DOM elements. The affected versions are Opera on Windows/UNIX older than 12.01 and on Mac OS X older than 11.66, with 12.x prior to 12.01 also affected. Root cause: failure to escape characters in DOM elements within crafted ...

CVE-2012-4146

Opera before 12.01 allows remote attackers to cause a denial of service application crash via a crafted web site, as demonstrated by the Lenovo "Shop now" page...

CVE-2012-4145

Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown impact and attack vectors, related to a "low severity issue."...

Opera < 12.01 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 12.01 and is, therefore, reportedly affected by multiple issues : - An error exists in the handling of certain URLs that can lead to memory corruption and possible code execution. 1016 - Errors exist in the handling of DOM elements...

Opera 12.01 Released With Fixes for Five Security Flaws

There are new versions of the Opera browser available, a small update to version 12.01, but they include a number of important security fixes, notably a patch for a vulnerability that could lead to remote code execution. The maintainers of Opera pushed out new versions for all of the major...

Element HTML content can be incorrectly returned without escaping, bypassing some HTML sanitizers

When sites accept HTML from untrusted users, and use that HTML as page content, they typically sanitize the untrusted HTML to ensure that it does not contain any harmful content, such as malicious scripts. In some cases, this sanitization may be performed by writing and reading the contents of DO...

Element HTML content can be incorrectly returned without escaping, bypassing some HTML sanitizers – Opera Security Advisories

When sites accept HTML from untrusted users, and use that HTML as page content, they typically sanitize the untrusted HTML to ensure that it does not contain any harmful content, such as malicious scripts. In some cases, this sanitization may be performed by writing and reading the contents of DO...

Small windows can be used in several ways to trick users into executing downloads

When the download dialog is displayed, it should always be visible to the user, to ensure that the user realizes it is there. If the dialog is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can end...

Certain characters in HTML can incorrectly be ignored, which can facilitate XSS attacks

Sites that allow content to be provided by untrusted users, such as forums and blogging sites, typically sanitize the untrusted content to ensure that it does not contain any harmful content, such as malicious scripts. When certain characters appear at specific locations within HTML markup, they...

Certain URL constructs can allow arbitrary code execution

Certain page address URL constructs can cause Opera to allocate the wrong amount of memory for storing the address. When it then attempts to store the address, it will overwrite unrelated memory with attacker-controlled data. This can lead to a crash, which may also execute that data as code...

Certain characters in HTML can incorrectly be ignored, which can facilitate XSS attacks – Opera Security Advisories

Sites that allow content to be provided by untrusted users, such as forums and blogging sites, typically sanitize the untrusted content to ensure that it does not contain any harmful content, such as malicious scripts. When certain characters appear at specific locations within HTML markup, they...

Certain URL constructs can allow arbitrary code execution – Opera Security Advisories

Certain page address URL constructs can cause Opera to allocate the wrong amount of memory for storing the address. When it then attempts to store the address, it will overwrite unrelated memory with attacker-controlled data. This can lead to a crash, which may also execute that data as code...

Small windows can be used in several ways to trick users into executing downloads – Opera Security Advisories

When the download dialog is displayed, it should always be visible to the user, to ensure that the user realizes it is there. If the dialog is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can end...

New OpFake Android Malware Entices Users With Opera Mini Browser

There is a new variant of the OpFake mobile malware making the rounds, and this version comes bundled with a version of the legitimate Opera Mini mobile browser. The malware targets Android phones and steals money from victims by sending SMS messages without the user’s knowledge to premium-rate...

update for opera (important)

update to 12.00 full changelog available at: http://www.opera.com/docs/changelogs/unix/1120/ - fixes bnc767045...

Opera Web Browser 11.65之前版本多个漏洞

BUGTRAQ ID: 54011 Opera为来自挪威的一个浏览器。 Opera Web Browser 11.65之前版本在实现上存在多个漏洞，攻击者可利用这些漏洞执行任意脚本代码，泄露敏感信息或欺骗可信站点的原始URL，进行网络钓鱼攻击。 0 Opera Software Opera Web Browser 9.x Opera Software Opera Web Browser 11.x Opera Software Opera Web Browser 10.x 厂商补丁： Opera Software --------------...

Opera Unspecified Vulnerability - June12 (Mac OS X)

The host is installed with Opera and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gboperaunspecifiedvulnmacosx.nasl 5977 2017-04-19 09:02:22Z teissa $ Opera Unspecified Vulnerability - June12 Mac OS X Authors: Sooraj KS Copyright: Copyright c 2012 Greenbone Networks GmbH...

Opera Unspecified Vulnerability (Jun 2012) - Mac OS X

Opera is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera URL Processing Arbitrary Code Execution Vulnerability (Linux)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperaurlcodeexecvulnlin.nasl 5999 2017-04-21 09:02:32Z teissa $ Opera URL Processing Arbitrary Code Execution Vulnerability Linux Authors: Sooraj KS Copyright: Copyright c 2012 Greenbo...

Opera URL Processing Arbitrary Code Execution Vulnerability (Mac OS X)

The host is installed with Opera and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gboperaurlcodeexecvulnmacosx.nasl 5888 2017-04-07 09:01:53Z teissa $ Opera URL Processing Arbitrary Code Execution Vulnerability Mac OS X Authors: Sooraj KS Copyright: Copyright c 2012...