CVE-2012-1003

CVE-2012-1003 affects Opera 11.60 and earlier across multiple platforms (Linux, macOS, Windows). The issue is described as an integer overflow affecting typed arrays and ArrayBuffer-related functions (Int32Array, Float32Array, Float64Array, Uint32Array, Int16Array, ArrayBuffer), allowing a remote...

CVE-2012-3566

CVE-2012-3566 : Opera before 12.00 Beta is vulnerable to a denial-of-service via JavaScript that changes a form before submission, enabling a user-assisted remote trigger that can cause the application to hang. The available documents identify the affected product and the root cause (malformed or...

CVE-2012-4146

Opera is affected by CVE-2012-4146 (and related 2012-41xx CVEs) on multiple platforms. The issue allows a remote attacker to cause an application crash (DoS) by visiting a crafted web page, as demonstrated by the Lenovo “Shop now” page. The vulnerability affects Opera before 12.01, with the Mac O...

CVE-2003-1388

CVE-2003-1388 describes a buffer overflow in Opera 7.02 Build 2668 that can be triggered by a long HTTP request ending with a .ZIP extension, allowing a remote attacker to crash the browser. The affected software is Opera (version 7.02, build 2668). The underlying cause is a buffer overflow in th...

CVE-2005-3006

The CVE for Opera (CVE-2005-3006) is a confirmed vulnerability in the Opera mail client prior to version 8.50. The issue arises because the mail client opens attached files from the user’s cache directory without warning, potentially allowing remote attackers to inject arbitrary web script and sp...

CVE-2005-3041

CVE-2005-3041 concerns Opera for Windows versions before 8.50. The issue is a drag‑and‑drop vulnerability described as an unspecified flaw that enables unintentional file uploads. The NVD entry lists a base score of 5.0 (Medium) with network attack vector, low complexity, and partial integrity im...

CVE-2006-6970

CVE-2006-6970 : Opera 9.10 Final can bypass Fraud Protection by appending certain characters (e.g., "." or "/") to the end of a domain, which escapes the blacklist filter. The NVD notes a remote-network vulnerability with low exploit complexity and partial confidentiality impact (no integrity or ...

CVE-2007-3929

CVE-2007-3929 describes a use-after-free vulnerability in the BitTorrent support of Opera prior to 9.22. A crafted BitTorrent header can leave a dangling pointer to an invalid object, potentially enabling user-assisted remote code execution. Connected advisories indicate multiple vulnerabilities ...

CVE-2008-5682

CVE-2008-5682 is an XSS vulnerability in the Opera web browser (affecting versions

CVE-2009-0916

Opera before 9.64 is affected by multiple vulnerabilities tracked as CVE-2009-0914, CVE-2009-0915, and CVE-2009-0916. OpenVAS and SUSE notes describe high-impact issues in the Opera Web Browser (Windows/Linux), with the CVSS base score of 10.0 (complete confidentiality, integrity, and availabilit...

CVE-2009-3049

Opera before 10.00 has an IDN in the address bar display bug that can enable URL spoofing and phishing via Unicode/Punycode handling. The connected advisories/documentation confirm multiple CVEs (including CVE-2009-3049) tied to IDN spoofing vulnerabilities. Practical impact: remote attackers cou...

CVE-2010-2659

The CVE-2010-2659 entry relates to Opera browsers where widget properties become accessible to third-party domains. Affected versions are Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms. The underlying impact is that remote attackers could obtain potent...

CVE-2011-2626

CVE-2011-2626 affects Opera browsers prior to 11.50, where an injected script could set the SRC attribute of an IFRAME, causing an application crash (DoS). Multiple vendor advisories reiterate the issue and reference Opera’s fixed release paths. Affected: Opera before 11.50; Impact: denial of ser...

CVE-2011-2638

CVE-2011-2638 affects Opera browser prior to 11.10. The vulnerability allows remote attackers to trigger an application crash (DoS) via unspecified content on a web page (e.g., games on zylom.com). Public references in Red Hat, SUSE, Gentoo GLSA, and OpenVAS entries confirm the same description. ...

CVE-2012-3561

Opera before 11.64 is affected by CVE-2012-3561 due to improper memory allocation for URL strings, enabling remote code execution or memory corruption/DoS via a crafted string. Impact is high (CVSS v2 base 10.0). Remediation from the public record requires upgrading to Opera 11.64 or newer. Other...

CVE-2012-3563

CVE-2012-3563 affects Opera browsers prior to 12.00 Beta. According to the sources, processing of a web page with invalid character encodings can cause the application to crash, constituting a remote denial of service. The CVSS v2 base score is 5.0 (Medium) with network access, low attack complex...

CVE-2012-3567

CVE-2012-3567 affects Opera before 12.00 Beta. The vulnerability is triggered via an IFRAME element using src="#" to embed a parent document, leading to memory consumption or an application hang (denial of service). The available connected documents confirm the same description and CVSS metrics (...

CVE-2012-6469

CVE-2012-6469 affects the Opera browser. The primary detail in the Initial Document states Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors in an error page. The connected OpenVAS entries list CVE-2012-6469 as part of a set of Opera vulner...

CVE-2003-1396

CVE-2003-1396 describes a heap-based buffer overflow in Opera versions 6.05 through 7.10 triggered by a filename with a long extension. This enables remote attackers to cause a denial of service (crash) and possibly execute arbitrary code. The root cause is a vulnerable handling of file extension...

CVE-2007-4944

CVE-2007-4944 affects Opera 9.x before 9.22 on Linux, FreeBSD, and Solaris. The underlying issue is that canvas.createPattern does not clear memory before using it to process a new pattern, which can allow a remote attacker to read memory contents via JavaScript. The vulnerability is described ac...

CVE-2007-5540

The provided documents confirm CVE-2007-5540 affects Opera (pre-9.24) and enables bypassing the same-origin policy when displaying frames from different sites. The root cause is described as an unspecified flaw in how Opera handles cross-domain frames, allowing remote attackers to overwrite funct...

CVE-2008-3078

Opera before 9.51 contains a memory-management flaw in CANVAS-related functions that can let remote attackers read uninitialized memory via JavaScript reading a canvas image. This is documented across multiple sources (NVD/SUSE/OpenVAS references). Affected product: Opera browser prior to version...

CVE-2010-2661

Opera before 10.54 (Windows/Mac) and before 10.60 (Unix) does not properly restrict access to the full pathname of a file selected for upload, potentially exposing sensitive information via DOM manipulations. Affected components/versions include the described Opera releases; CVE-2010-2661 is the ...

CVE-2011-2613

CVE-2011-2613 affects Opera browsers prior to 11.50. The vulnerability arises in the Array.prototype.join implementation when called on a non-array object that contains initial holes, enabling a remote attacker to cause an application crash (DoS). The issue is documented across multiple vendors/a...

CVE-2011-2633

Opera browser contains a vulnerability tracked as CVE-2011-2633 (part of a set of Opera CVEs in 2011) where processing a Certificate Revocation List (CRL) file can cause an application crash resulting in denial of service. The initial entry specifies Opera before 11.11; Gentoo GLSA 201206-03 and ...

CVE-2011-2640

CVE-2011-2640 affects Opera before 11.10. An HTML document with an empty parameter value for an embedded Java applet could cause the browser to crash (remote denial of service). Remediation: upgrade to Opera 11.10 or newer as indicated by the referenced advisories.

CVE-2012-1927

CVE-2012-1927 affects the Opera browser prior to 11.62. The issue lets remote attackers spoof the address bar by triggering a dialog window from a different domain, potentially misleading users. Exploitation details beyond the public description are not provided in the connected documents. Accord...

CVE-2012-1928

The CVE-2012-1928 entry concerns Opera before 11.62. The vulnerability allows remote attackers to spoof the address bar by triggering a page reload followed by a redirect to a different domain. Connected sources confirm Opera 11.62 as the fix/version that mitigates this issue. Affected component:...

CVE-2012-3564

CVE-2012-3564 describes a denial-of-service condition in Opera prior to 12.00 Beta caused by a crafted absolutely positioned wrap=off TEXTAREA element placed next to an overflow: auto block. The vulnerability affects the rendering/input handling of a TEXTAREA and can cause the application to hang...

CVE-2012-3565

CVE-2012-3565 affects Opera prior to 12.00 Beta. The vulnerability allows remote attackers to cause an application crash (denial of service) by supplying crafted characters in domain names, as demonstrated by IDNA2008 tests. Multiple security repositories (NVD, OpenVAS entries) corroborate a MEDI...

CVE-2012-4143

Opera < 12.01 on Windows/UNIX and = 12.01.1532) as remediation. No explicit root cause details are provided beyond the dialog-based delivery vector in the sources.

CVE-2012-6462

CVE-2012-6462 refers to Opera before 12.10, where improper CORS handling allows remote attackers to bypass page-content restrictions with a crafted request. The impact is a partial confidentiality concern; no exploitation details are provided in the sources. Remediation guidance from Gentoo GLSA ...

CVE-2012-6463

CVE-2012-6463 is an XSS vulnerability in Opera prior to 12.10 where an attacker could inject arbitrary script via a sequence involving loading documents and data: URLs. The NVD entry assigns a base score of 4.3 (Medium) with No confidentiality impact, Partial integrity impact, and No availability...

CVE-2013-1639

Opera before 12.13 fails to send CORS preflight requests in all required cases, allowing a remote attacker to bypass CSRF protection via a crafted site that triggers a CORS request. The connected Gentoo/OpenVAS entries corroborate Opera as the affected product and advise upgrading to Opera 12.13_...

CVE-2006-3353

Opera 9 is affected by CVE-2006-3353. A crafted web page can cause a denial of service (crash) through an out-of-bounds memory access, triggered by an iframe and JavaScript accessing certain styleSheets properties. The description consistently attributes this to Opera 9 and cites a DoS impact; no...

CVE-2007-5276

Opera 9 is vulnerable to DNS rebinding due to their DNS pinning behavior: the client drops pins based on failed connections to irrelevant TCP ports, enabling an attacker to use a port 81 URL in an IMG SRC to bypass the pin established for a session on port 80. Concrete details in the provided doc...

CVE-2007-6523

CVE-2007-6523 affects Opera 9.50 beta and Opera 9.x prior to 9.25. The issue is a vulnerability in the handling of bitmap (BMP) files where a crafted BMP can trigger a large number of calculations and checks, leading to high CPU usage and a potential denial of service. The root cause is described...

CVE-2008-1080

Opera before 9.26 is affected by CVE-2008-1080, CVE-2008-1081, and CVE-2008-1082. The issues stem from input handling in file form fields, image comments, and DOM attribute value representation in imported XML documents, allowing a remote attacker to trigger file path manipulation, script executi...

CVE-2010-4582

CVE-2010-4582 affects Opera browser. The flaw arises when updating extensions, where security policies are not properly enforced, potentially letting a remote attacker bypass intended access restrictions via unspecified vectors. Public advisories (SUSE/Gentoo GLSA 201206-03) describe this as part...

CVE-2011-0685

CVE-2011-0685 affects Opera before 11.01 where the Delete Private Data feature’s Clear all email account passwords option was not properly implemented, potentially allowing a physically proximate attacker to access an email account on an unattended workstation. Connected advisories (SUSE/OpenSUSE...

CVE-2011-2618

CVE-2011-2618 affects Opera (before 11.50). The vulnerability allows a remote attacker to cause a denial of service (application crash) by triggering a web script that moves an audio or video element between windows. Public sources in connected docs confirm Opera prior to 11.50 as vulnerable; no ...

CVE-2012-1929

Opera pre-11.62 for Mac OS X is affected by CVE-2012-1929, where crafted styling can cause page content to render outside the intended area, enabling spoofing of the address field and security dialogs. The issue is documented across multiple sources (NVD/SUSE openSUSE advisories and OpenVAS entri...

CVE-2012-3557

CVE-2012-3557 affects Opera prior to 11.65. The issue is improper restriction in reading JSON strings, enabling a crafted site to trigger cross-domain loading of JSON resources and potentially disclose sensitive information. The vulnerability is associated with Opera’s JSON handling; affected pla...

CVE-2014-1870

CVE-2014-1870 affects Opera on Mac OS X prior to version 19. The vulnerability allows a user‑assisted remote attacker to spoof the address bar through drag‑and‑drop related vectors. The public records consistently describe the issue as an address bar spoofing flaw in Opera before 19 on macOS, wit...

CVE-2004-2491

CVE-2004-2491 describes a race condition in Opera 7.53 Build 3850 that causes the address bar to be filled before the page is loaded, enabling remote attackers to spoof the URL via window.open and location.replace and potentially facilitate phishing. Affected product: Opera Web Browser 7.53 Build...

CVE-2005-3007

Opera before 8.50 is affected by a vulnerability where appending a trailing dot to a filename spoofed the content type, potentially tricking users into processing dangerous content. The issue concerns the browser’s handling of file-type presentation rather to content-type verification, enabling m...

CVE-2006-3945

CVE-2006-3945 affects Opera 9 on Windows XP SP2. The vulnerability arises in the CSS functionality where setting the background property of a DHTML element to a long http(s) URL triggers memory corruption, leading to a denial of service (crash). The sources consistently describe this as a remote ...

CVE-2007-6521

Opera before 9.25 is affected by a heap-based buffer overflow during TLS certificate parsing (specifically subject alternative names in X.509 certificates), which can allow remote attackers to cause a crash or execute arbitrary code. This vulnerability (CVE-2007-6521) was addressed in Opera 9.25,...

CVE-2008-1082

Opera before 9.26 is affected by CVE-2008-1082 due to a flaw in handling DOM attribute values of imported XML documents, which allows bypassing sanitization filters and enables cross-site scripting (XSS). This configures a remote attacker to exploit crafted attribute values in an XML document dur...

CVE-2008-4697

CVE-2008-4697 affects Opera before 9.61 where the Fast Forward feature executes a javascript: URL in the context of the outermost frame, enabling remote XSS. Affected product: Opera browser; vulnerable component/behavior: framed page handling in Fast Forward. Impact per sources includes cross-sit...