CVE-2012-3567

CVE-2012-3567 affects Opera before 12.00 Beta. The vulnerability is triggered via an IFRAME element using src="#" to embed a parent document, leading to memory consumption or an application hang (denial of service). The available connected documents confirm the same description and CVSS metrics (...

CVE-2012-4146

Opera is affected by CVE-2012-4146 (and related 2012-41xx CVEs) on multiple platforms. The issue allows a remote attacker to cause an application crash (DoS) by visiting a crafted web page, as demonstrated by the Lenovo “Shop now” page. The vulnerability affects Opera before 12.01, with the Mac O...

CVE-2003-1397

The CVE-2003-1397 entry affects Opera 6.05 and Opera 7.0. A crafted HTTP request containing a long string is passed to the ShowDocument method via the PluginContext object, causing a denial of service (crash). The provided documents state this as the vulnerability without detailing exploitable st...

CVE-2004-1201

CVE-2004-1201 affects Opera 7.54 and describes a denial-of-service condition caused by a memory-exhaustion scenario triggered by JavaScript that repeatedly creates nested arrays and sorts them. The issue leads to an application crash. This summary reflects information from the NVD/NVD-family reco...

CVE-2007-1737

Opera 9.10 is affected: URLs embedded in object or iframe HTML tags are not checked against the phishing site blacklist, allowing bypass of phishing protection. Root cause is the failure to validate these embedded URLs. Impact is bypass of anti-phishing checks; explicit exploit details or in-the-...

CVE-2009-0916

Opera before 9.64 is affected by multiple vulnerabilities tracked as CVE-2009-0914, CVE-2009-0915, and CVE-2009-0916. OpenVAS and SUSE notes describe high-impact issues in the Opera Web Browser (Windows/Linux), with the CVSS base score of 10.0 (complete confidentiality, integrity, and availabilit...

CVE-2009-3013

The CVE-2009-3013 issue affects Opera 9.52 and earlier, and Opera 10.00 Beta 3 Build 1699, where data: URIs in HTTP Location headers were not properly blocked, enabling cross-site scripting (XSS) via two vectors: (1) a Location header containing JavaScript sequences in a data:text/html URI, and (...

CVE-2010-2660

Opera before 10.54 on Windows/Mac and before 10.60 on UNIX suffers from improper restriction of certain homograph characters in domain names, enabling remote attackers to spoof IDN domains. Root cause: inadequate validation of characters used in domain names. Impact: possible spoofing of the addr...

CVE-2010-2661

Opera before 10.54 (Windows/Mac) and before 10.60 (Unix) does not properly restrict access to the full pathname of a file selected for upload, potentially exposing sensitive information via DOM manipulations. Affected components/versions include the described Opera releases; CVE-2010-2661 is the ...

CVE-2011-2626

CVE-2011-2626 affects Opera browsers prior to 11.50, where an injected script could set the SRC attribute of an IFRAME, causing an application crash (DoS). Multiple vendor advisories reiterate the issue and reference Opera’s fixed release paths. Affected: Opera before 11.50; Impact: denial of ser...

CVE-2011-2633

Opera browser contains a vulnerability tracked as CVE-2011-2633 (part of a set of Opera CVEs in 2011) where processing a Certificate Revocation List (CRL) file can cause an application crash resulting in denial of service. The initial entry specifies Opera before 11.11; Gentoo GLSA 201206-03 and ...

CVE-2011-2639

Opera before version 11.10 is affected by a vulnerability where hidden animated GIF images trigger continual repaints, leading to CPU consumption and denial of service. The issue is documented across multiple sources (Red Hat security advisory and Gentoo GLSA 201206-03). Remediation in the public...

CVE-2012-1927

CVE-2012-1927 affects the Opera browser prior to 11.62. The issue lets remote attackers spoof the address bar by triggering a dialog window from a different domain, potentially misleading users. Exploitation details beyond the public description are not provided in the connected documents. Accord...

CVE-2012-1928

The CVE-2012-1928 entry concerns Opera before 11.62. The vulnerability allows remote attackers to spoof the address bar by triggering a page reload followed by a redirect to a different domain. Connected sources confirm Opera 11.62 as the fix/version that mitigates this issue. Affected component:...

CVE-2012-3564

CVE-2012-3564 describes a denial-of-service condition in Opera prior to 12.00 Beta caused by a crafted absolutely positioned wrap=off TEXTAREA element placed next to an overflow: auto block. The vulnerability affects the rendering/input handling of a TEXTAREA and can cause the application to hang...

CVE-2012-6463

CVE-2012-6463 is an XSS vulnerability in Opera prior to 12.10 where an attacker could inject arbitrary script via a sequence involving loading documents and data: URLs. The NVD entry assigns a base score of 4.3 (Medium) with No confidentiality impact, Partial integrity impact, and No availability...

CVE-2003-1396

CVE-2003-1396 describes a heap-based buffer overflow in Opera versions 6.05 through 7.10 triggered by a filename with a long extension. This enables remote attackers to cause a denial of service (crash) and possibly execute arbitrary code. The root cause is a vulnerable handling of file extension...

CVE-2004-1615

Opera permits remote attackers to trigger a denial of service by crafting a web page or HTML email containing a TBODY tag with a large COL SPAN value, leading to an invalid memory reference and application crash. The provided documents identify the affected software as Opera and the impact as par...

CVE-2006-3353

Opera 9 is affected by CVE-2006-3353. A crafted web page can cause a denial of service (crash) through an out-of-bounds memory access, triggered by an iframe and JavaScript accessing certain styleSheets properties. The description consistently attributes this to Opera 9 and cites a DoS impact; no...

CVE-2008-3078

Opera before 9.51 contains a memory-management flaw in CANVAS-related functions that can let remote attackers read uninitialized memory via JavaScript reading a canvas image. This is documented across multiple sources (NVD/SUSE/OpenVAS references). Affected product: Opera browser prior to version...

CVE-2008-4195

Opera before 9.52 is vulnerable to a framing-related flaw where a framed page can cause another frame to display an arbitrary address, enabling remote attackers to manipulate the UI such as the address bar. The issue is CVE-2008-4195. A Gentoo GLSA advisory (GLSA-200811-01) and SUSE/GNU/NVD entri...

CVE-2008-4697

CVE-2008-4697 affects Opera before 9.61 where the Fast Forward feature executes a javascript: URL in the context of the outermost frame, enabling remote XSS. Affected product: Opera browser; vulnerable component/behavior: framed page handling in Fast Forward. Impact per sources includes cross-sit...

CVE-2009-3049

Opera before 10.00 has an IDN in the address bar display bug that can enable URL spoofing and phishing via Unicode/Punycode handling. The connected advisories/documentation confirm multiple CVEs (including CVE-2009-3049) tied to IDN spoofing vulnerabilities. Practical impact: remote attackers cou...

CVE-2011-2613

CVE-2011-2613 affects Opera browsers prior to 11.50. The vulnerability arises in the Array.prototype.join implementation when called on a non-array object that contains initial holes, enabling a remote attacker to cause an application crash (DoS). The issue is documented across multiple vendors/a...

CVE-2011-2638

CVE-2011-2638 affects Opera browser prior to 11.10. The vulnerability allows remote attackers to trigger an application crash (DoS) via unspecified content on a web page (e.g., games on zylom.com). Public references in Red Hat, SUSE, Gentoo GLSA, and OpenVAS entries confirm the same description. ...

CVE-2012-1929

Opera pre-11.62 for Mac OS X is affected by CVE-2012-1929, where crafted styling can cause page content to render outside the intended area, enabling spoofing of the address field and security dialogs. The issue is documented across multiple sources (NVD/SUSE openSUSE advisories and OpenVAS entri...

CVE-2012-3557

CVE-2012-3557 affects Opera prior to 11.65. The issue is improper restriction in reading JSON strings, enabling a crafted site to trigger cross-domain loading of JSON resources and potentially disclose sensitive information. The vulnerability is associated with Opera’s JSON handling; affected pla...

CVE-2012-3565

CVE-2012-3565 affects Opera prior to 12.00 Beta. The vulnerability allows remote attackers to cause an application crash (denial of service) by supplying crafted characters in domain names, as demonstrated by IDNA2008 tests. Multiple security repositories (NVD, OpenVAS entries) corroborate a MEDI...

CVE-2012-6462

CVE-2012-6462 refers to Opera before 12.10, where improper CORS handling allows remote attackers to bypass page-content restrictions with a crafted request. The impact is a partial confidentiality concern; no exploitation details are provided in the sources. Remediation guidance from Gentoo GLSA ...

CVE-2003-1388

CVE-2003-1388 describes a buffer overflow in Opera 7.02 Build 2668 that can be triggered by a long HTTP request ending with a .ZIP extension, allowing a remote attacker to crash the browser. The affected software is Opera (version 7.02, build 2668). The underlying cause is a buffer overflow in th...

CVE-2005-3006

The CVE for Opera (CVE-2005-3006) is a confirmed vulnerability in the Opera mail client prior to version 8.50. The issue arises because the mail client opens attached files from the user’s cache directory without warning, potentially allowing remote attackers to inject arbitrary web script and sp...

CVE-2005-3007

Opera before 8.50 is affected by a vulnerability where appending a trailing dot to a filename spoofed the content type, potentially tricking users into processing dangerous content. The issue concerns the browser’s handling of file-type presentation rather to content-type verification, enabling m...

CVE-2005-3041

CVE-2005-3041 concerns Opera for Windows versions before 8.50. The issue is a drag‑and‑drop vulnerability described as an unspecified flaw that enables unintentional file uploads. The NVD entry lists a base score of 5.0 (Medium) with network attack vector, low complexity, and partial integrity im...

CVE-2007-4944

CVE-2007-4944 affects Opera 9.x before 9.22 on Linux, FreeBSD, and Solaris. The underlying issue is that canvas.createPattern does not clear memory before using it to process a new pattern, which can allow a remote attacker to read memory contents via JavaScript. The vulnerability is described ac...

CVE-2007-5540

The provided documents confirm CVE-2007-5540 affects Opera (pre-9.24) and enables bypassing the same-origin policy when displaying frames from different sites. The root cause is described as an unspecified flaw in how Opera handles cross-domain frames, allowing remote attackers to overwrite funct...

CVE-2010-4580

Opera before 11.00 is affected by a vulnerability where WAP/WML form fields are not cleared when navigating to a new site, allowing a remote attacker to obtain sensitive information from an input field that shares a name with a previously visited site. The issue is confirmed in CVE-2010-4580 and ...

CVE-2010-4581

Opera before 11.00 is listed with an unspecified vulnerability (CVE-2010-4581) among multiple high‑severity issues. Connected advisories (SUSE/Gentoo GLSA 201206-03 and related Nessus plugins) indicate the risk includes remote code execution/DoS and other impacts; remediation guidance consistentl...

CVE-2010-4582

CVE-2010-4582 affects Opera browser. The flaw arises when updating extensions, where security policies are not properly enforced, potentially letting a remote attacker bypass intended access restrictions via unspecified vectors. Public advisories (SUSE/Gentoo GLSA 201206-03) describe this as part...

CVE-2011-0685

CVE-2011-0685 affects Opera before 11.01 where the Delete Private Data feature’s Clear all email account passwords option was not properly implemented, potentially allowing a physically proximate attacker to access an email account on an unattended workstation. Connected advisories (SUSE/OpenSUSE...

CVE-2011-2618

CVE-2011-2618 affects Opera (before 11.50). The vulnerability allows a remote attacker to cause a denial of service (application crash) by triggering a web script that moves an audio or video element between windows. Public sources in connected docs confirm Opera prior to 11.50 as vulnerable; no ...

CVE-2011-2625

CVE-2011-2625 affects the Opera browser prior to 11.50. The issue is a denial-of-service crash triggered by a SELECT element containing many OPTION elements, as described in the initial entry. Connected advisories confirm that Opera 11.50 addresses multiple vulnerabilities and provides the fix fo...

CVE-2011-2640

CVE-2011-2640 affects Opera before 11.10. An HTML document with an empty parameter value for an embedded Java applet could cause the browser to crash (remote denial of service). Remediation: upgrade to Opera 11.10 or newer as indicated by the referenced advisories.

CVE-2012-6472

CVE-2012-6472 affects Opera on UNIX: Opera before 12.12 uses weak permissions on the profile directory, allowing local users to read sensitive files (cache, password, configuration) and potentially modify configuration to gain privileges. Existence of related entries confirms the issue across mul...

CVE-2014-1870

CVE-2014-1870 affects Opera on Mac OS X prior to version 19. The vulnerability allows a user‑assisted remote attacker to spoof the address bar through drag‑and‑drop related vectors. The public records consistently describe the issue as an address bar spoofing flaw in Opera before 19 on macOS, wit...

CVE-2004-2491

CVE-2004-2491 describes a race condition in Opera 7.53 Build 3850 that causes the address bar to be filled before the page is loaded, enabling remote attackers to spoof the URL via window.open and location.replace and potentially facilitate phishing. Affected product: Opera Web Browser 7.53 Build...

CVE-2007-5276

Opera 9 is vulnerable to DNS rebinding due to their DNS pinning behavior: the client drops pins based on failed connections to irrelevant TCP ports, enabling an attacker to use a port 81 URL in an IMG SRC to bypass the pin established for a session on port 80. Concrete details in the provided doc...

CVE-2008-5683

Opera Web Browser Multiple Vulnerabilities (Dec 2008) include CVE-2008-5683, described as an unspecified vulnerability that could reveal random data. Affected product: Opera browser. Impact cited in the Gentoo GLSA/opens vulnerability records; browser upgrade to Opera 9.64 or later is advised as ...

CVE-2011-0687

Opera before 11.01 is vulnerable to a denial-of-service via crafted WAP documents that abuse WAP dropdown lists, caused by input validation issues (CWE-20). The issue can crash the application, with CVSS v2 base score 4.3 (Medium). Affected product/version: Opera up to 11.01 (as described in mult...

CVE-2011-2630

CVE-2011-2630 concerns Opera browser (pre-12.x) where a user-assisted remote page can crash the app during a reload after opening the Easy Sticky Note extension popup. Affected product/version: Opera before 11.11 (as per the CVE description). The issue is a denial of service due to improper handl...

CVE-2011-2636

Summary: CVE-2011-2636 affects the Opera browser prior to 11.10 and could cause a denial of service (application crash) when processing unknown content on a web page, as illustrated by a Tomato Firmware page. The OpenVAS/Gentoo/SUSE/Red Hat entries corroborate multiple vendors’ advisories for Ope...