CVE-2008-5680

CVE-2008-5680 corresponds to multiple buffer overflow vulnerabilities in Opera before 9.63. Specifically, insecure handling in (1) text-area processing and (2) long host names in file:// URLs could allow remote code execution. The combined impact is high: a remote attacker could trigger arbitrary...

CVE-2009-2063

Opera vulnerable to SSL-tampering via a 3xx HTTP CONNECT response processed before the SSL handshake (CVE-2009-2063). An attacker could MITM an HTTPS site by injecting a 302 redirect to another HTTPS page, enabling arbitrary script execution in the context of the target site. Affected: Opera vers...

CVE-2009-2577

CVE-2009-2577 is an Opera Unicode String Denial of Service vulnerability affecting Opera 9.52 and earlier. The issue allows a remote attacker to trigger a Denial of Service by supplying a long Unicode string argument to the write method, leading to CPU/memory consumption and an application hang. ...

CVE-2010-4046

CVE-2010-4046 affects Opera browsers prior to 10.63. The vulnerability stems from Opera’s insufficient verification of video content origins, enabling a remote attacker to cause a video stream to be used as HTML5 canvas content and potentially reveal sensitive information. The issue is documented...

CVE-2011-2617

Technical details for CVE-2011-2617 are not publicly provided in the supplied documents; the materials only reiterate an unspecified denial-of-service vulnerability in Opera before 11.50. Monitor for updates.

CVE-2011-2631

The CVE-2011-2631 entry concerns Opera's CSS column-count handling in Opera prior to 11.11, which can cause a denial of service (infinite repaint loop leading to an app hang) when processing a crafted page. Connected sources confirm Opera as the affected product and indicate the root cause is imp...

CVE-2011-4683

Opera before 11.60 is affected by multiple vulnerabilities (described in GLSA-201206-03). A remote attacker could entice a user to open a crafted page, potentially allowing execution of arbitrary code or other impacts; local attackers could abuse symlink attacks; there are broader DoS/spoofing im...

CVE-2011-4685

CVE-2011-4685 affects Opera prior to version 11.60. The issue allows remote attackers to cause a denial of service (application crash) via content on a web page (e.g., Forbes demonstrates). Affected software: Opera before 11.60. Root cause details are not elaborated in the provided text beyond th...

CVE-2012-4010

The CVE-2012-4010 entry concerns Opera prior to 11.60, enabling address bar spoofing via unspecified homograph characters (distinct from CVE-2010-2660). Public sources in the provided documents confirm this vulnerability affects the Opera browser and describe the impact as spoofing the address ba...

CVE-2012-6467

CVE-2012-6467 is confirmed to affect Opera (pre-12.10) via how it follows Internet shortcuts referenced by an IMG or inline element, enabling phishing-style attacks on crafted pages (described as exploited in the wild in 2012). OpenVAS entries map this family of vulnerabilities to a high base sco...

CVE-2005-2405

Opera 8.01 is affected when Arial Unicode MS (ARIALUNI.TTF) is installed: extended ASCII in the file-download dialog can be spoofed, potentially leading users to execute arbitrary code. The issue is documented in CVE-2005-2405; OpenVAS notes vulnerability in Opera

CVE-2007-2809

CVE-2007-2809 refers to a buffer overflow in Opera’s transfer manager for Windows prior to version 9.21. An attacker could trigger arbitrary code execution by supplying a crafted torrent file, with exploitation described as user-assisted and requiring the user to interact with the torrent entry (...

CVE-2009-3013

The CVE-2009-3013 issue affects Opera 9.52 and earlier, and Opera 10.00 Beta 3 Build 1699, where data: URIs in HTTP Location headers were not properly blocked, enabling cross-site scripting (XSS) via two vectors: (1) a Location header containing JavaScript sequences in a data:text/html URI, and (...

CVE-2010-2662

CVE-2010-2662: Opera before 10.60 allows remote attackers to bypass the popup blocker using a javascript: URL and a fake click. Affected product is the Opera browser; vulnerability details and CVE references are documented in multiple sources. Mitigation per Gentoo GLSA 201206-03 recommends upgra...

CVE-2010-4047

Opera before 10.63 is affected by a vulnerability where the security context of JavaScript on the error page is not correctly enforced, enabling user‑assisted remote XSS via a crafted site. Affected component: Opera browser (pre-10.63). Underlying cause: improper security context handling for err...

CVE-2010-4049

Opera before 10.63 is vulnerable to a denial-of-service via a Flash movie with a transparent Window Mode (wmode) property not handled correctly when navigating away from the containing HTML document. Affected products are Opera on Mac, Linux, and Windows; root cause is improper handling of Flash ...

CVE-2011-0682

CVE-2011-0682 is an Opera vulnerability caused by an integer truncation in opera.dll that can be triggered by an HTML form with a select element containing a large number of children. The issue could allow remote arbitrary code execution or memory corruption. Opera 11.01 addresses this vulnerabil...

CVE-2011-2628

Opera is vulnerable in older releases, specifically before 11.11, due to improper handling of FRAMESET elements which can enable memory corruption leading to remote code execution or denial of service via page unload vectors. Public scans and advisories (GLSA 201206-03, Gentoo/Nessus/OpenVAS entr...

CVE-2012-3568

CVE-2012-3568 affects Opera prior to 12.00 Beta, where remote attackers could trigger a denial of service (application crash) by supplying crafted WebGL content (as demonstrated by a codeflow.org WebGL demo). The connected sources (OpenVAS entries and NVD record) corroborate a WebGL-related crash...

CVE-2004-1615

Opera permits remote attackers to trigger a denial of service by crafting a web page or HTML email containing a TBODY tag with a large COL SPAN value, leading to an invalid memory reference and application crash. The provided documents identify the affected software as Opera and the impact as par...

CVE-2004-1810

The CVE-2004-1810 entry maps to a vulnerability in the Opera browser’s JavaScript engine (reported for Opera 7.x). The issue arises when handling very large JavaScript Array objects, where creating an Array with an extremely large size value and writing into it can crash the browser. OpenVAS and ...

CVE-2007-0802

CVE-2007-0802 affects Mozilla Firefox 2.0.0.1, where remote attackers could bypass phishing protection by appending certain characters to the domain name (e.g., ‘.’ or ‘/’), which are not caught by the Phishing List blacklist. The initial description and connected sources consistently describe th...

CVE-2007-1115

CVE-2007-1115 affects Opera 9 before 9.20. The vulnerability arises when a page with no explicit charset in Content-Type or META tag causes child frames to inherit the parent’s default charset, enabling cross-site scripting (XSS). Demonstrations used UTF-7 to show exploitation. Some related advis...

CVE-2007-3819

Opera 9.21 is affected by CVE-2007-3819: a vulnerability that lets remote attackers spoof the data: URI scheme in the address bar by providing a long URI with trailing whitespace, which prevents the initial part of the URI from being displayed. This can enable spoofing of the targeted site in the...

CVE-2008-2716

CVE-2008-2716 affects Opera before 9.5, where an unspecified vulnerability could allow remote attackers to spoof contents of trusted frames on the same parent page by modifying the location, enabling phishing. Public references indicate this CVE was addressed in Opera 9.50 via security updates (e...

CVE-2008-4198

CVE-2008-4198 affects Opera before 9.52. When an HTTP page that loads an HTTPS page in a frame is rendered, Opera shows a padlock security indicator and a dialog for a secure connection, which could mislead users into unsafe actions on the HTTP page. Connected advisories confirm this as a frame/s...

CVE-2009-4072

Opera 9.x/10.x vulnerable to CVE-2009-4072 (and related CVEs) as part of a set of high‑severity vulnerabilities. Affected product: Opera Web Browser (Windows/Linux). Issue type: Information Disclosure and unspecified vulnerabilities with potential for arbitrary code execution or DoS. Root cause/i...

CVE-2011-0683

Opera before 11.01 did not properly restrict opera: URLs, enabling clickjacking via a crafted site. A remote attacker could lure a user to a malicious page to perform a clickjacking attack. Affected: Opera up to version 11.00; remediation: upgrade to Opera 11.01 or later where the issue is fixed....

CVE-2011-2623

Opera before 11.50 contains an unspecified vulnerability in the SVG BiDi implementation that could be exploited remotely to cause a denial of service (application crash or hang) via unknown vectors. Affected product: Opera browser. Root cause details are not provided beyond the SVG BiDi issue. Mi...

CVE-2011-2627

CVE-2011-2627 affects Opera’s DOM implementation prior to version 11.50, enabling a remote attacker to crash the application via unspecified content on a web page (denial of service). The description states an unspecified vulnerability with live.com as a demonstrator, and connected sources corrob...

CVE-2011-4682

CVE-2011-4682 corresponds to an Opera JavaScript engine issue where the in operator is not correctly implemented, allowing remote attackers to bypass the Same Origin Policy via cross-site variable vectors. The vulnerability affects Opera releases prior to 11.60, with exploitation leading to poten...

CVE-2011-4686

Opera CVE-2011-4686 describes an unspecified vulnerability in the Web Workers implementation that could cause an application crash (DoS) in Opera before version 11.60. The connected security records corroborate this as a vulnerability affecting Opera and note a fixed release (11.60) accompanying ...

CVE-2011-4690

CVE-2011-4690 affects Opera 11.60 and earlier. The vulnerability arises because Opera does not prevent capturing timing data related to Same Origin Policy violations during IFRAME loading, enabling remote attackers to determine whether a document exists in the browser cache via crafted JavaScript...

CVE-2012-1003

CVE-2012-1003 affects Opera 11.60 and earlier across multiple platforms (Linux, macOS, Windows). The issue is described as an integer overflow affecting typed arrays and ArrayBuffer-related functions (Int32Array, Float32Array, Float64Array, Uint32Array, Int16Array, ArrayBuffer), allowing a remote...

CVE-2012-3558

Opera before 11.65 is affected by CVE-2012-3558. The vulnerability arises because the address bar may not correspond to the displayed page during unusually timed changes, enabling user-assisted spoofing via navigation, reloads, and redirects. Connected sources corroborate multiple vulnerabilities...

CVE-2012-3566

CVE-2012-3566 : Opera before 12.00 Beta is vulnerable to a denial-of-service via JavaScript that changes a form before submission, enabling a user-assisted remote trigger that can cause the application to hang. The available documents identify the affected product and the root cause (malformed or...

CVE-2003-1397

The CVE-2003-1397 entry affects Opera 6.05 and Opera 7.0. A crafted HTTP request containing a long string is passed to the ShowDocument method via the PluginContext object, causing a denial of service (crash). The provided documents state this as the vulnerability without detailing exploitable st...

CVE-2005-4718

CVE-2005-4718 affects Opera 8.02 and earlier. The issue allows remote denial of service (client crash) via two vectors: (1) a crafted HTML file containing a content: url(0); style attribute, a bodyA tag, a long string, and a long attribute on a u tag (oper a.html demonstrated); and (2) a BGSOUND ...

CVE-2008-3078

Opera before 9.51 contains a memory-management flaw in CANVAS-related functions that can let remote attackers read uninitialized memory via JavaScript reading a canvas image. This is documented across multiple sources (NVD/SUSE/OpenVAS references). Affected product: Opera browser prior to version...

CVE-2008-4195

Opera before 9.52 is vulnerable to a framing-related flaw where a framed page can cause another frame to display an arbitrary address, enabling remote attackers to manipulate the UI such as the address bar. The issue is CVE-2008-4195. A Gentoo GLSA advisory (GLSA-200811-01) and SUSE/GNU/NVD entri...

CVE-2009-0916

Opera before 9.64 is affected by multiple vulnerabilities tracked as CVE-2009-0914, CVE-2009-0915, and CVE-2009-0916. OpenVAS and SUSE notes describe high-impact issues in the Opera Web Browser (Windows/Linux), with the CVSS base score of 10.0 (complete confidentiality, integrity, and availabilit...

CVE-2010-4043

Technical details (affected product/version/root cause/impact) for CVE-2010-4043 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2011-2622

CVE-2011-2622 affects the Opera web browser (pre-11.50) where a vulnerability in the Web Workers implementation can cause a denial of service (application crash) from remote attackers. The vectors are described as unknown in the primary description, with no explicit exploit details provided. Conn...

CVE-2012-4146

Opera is affected by CVE-2012-4146 (and related 2012-41xx CVEs) on multiple platforms. The issue allows a remote attacker to cause an application crash (DoS) by visiting a crafted web page, as demonstrated by the Lenovo “Shop now” page. The vulnerability affects Opera before 12.01, with the Mac O...

CVE-2013-1639

Opera before 12.13 fails to send CORS preflight requests in all required cases, allowing a remote attacker to bypass CSRF protection via a crafted site that triggers a CORS request. The connected Gentoo/OpenVAS entries corroborate Opera as the affected product and advise upgrading to Opera 12.13_...

CVE-2004-1201

CVE-2004-1201 affects Opera 7.54 and describes a denial-of-service condition caused by a memory-exhaustion scenario triggered by JavaScript that repeatedly creates nested arrays and sorts them. The issue leads to an application crash. This summary reflects information from the NVD/NVD-family reco...

CVE-2005-2406

CVE-2005-2406 affects Opera 8.01. The vulnerability allows remote attackers to perform cross-site scripting (XSS) or alter which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI. Root cause is input handling during file drag that leads to script execution. ...

CVE-2005-3006

The CVE for Opera (CVE-2005-3006) is a confirmed vulnerability in the Opera mail client prior to version 8.50. The issue arises because the mail client opens attached files from the user’s cache directory without warning, potentially allowing remote attackers to inject arbitrary web script and sp...

CVE-2007-1737

Opera 9.10 is affected: URLs embedded in object or iframe HTML tags are not checked against the phishing site blacklist, allowing bypass of phishing protection. Root cause is the failure to validate these embedded URLs. Impact is bypass of anti-phishing checks; explicit exploit details or in-the-...

CVE-2010-2659

The CVE-2010-2659 entry relates to Opera browsers where widget properties become accessible to third-party domains. Affected versions are Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms. The underlying impact is that remote attackers could obtain potent...