282 matches found
CVE-2006-3945
CVE-2006-3945 affects Opera 9 on Windows XP SP2. The vulnerability arises in the CSS functionality where setting the background property of a DHTML element to a long http(s) URL triggers memory corruption, leading to a denial of service (crash). The sources consistently describe this as a remote ...
CVE-2007-5276
Opera 9 is vulnerable to DNS rebinding due to their DNS pinning behavior: the client drops pins based on failed connections to irrelevant TCP ports, enabling an attacker to use a port 81 URL in an IMG SRC to bypass the pin established for a session on port 80. Concrete details in the provided doc...
CVE-2007-6521
Opera before 9.25 is affected by a heap-based buffer overflow during TLS certificate parsing (specifically subject alternative names in X.509 certificates), which can allow remote attackers to cause a crash or execute arbitrary code. This vulnerability (CVE-2007-6521) was addressed in Opera 9.25,...
CVE-2007-6523
CVE-2007-6523 affects Opera 9.50 beta and Opera 9.x prior to 9.25. The issue is a vulnerability in the handling of bitmap (BMP) files where a crafted BMP can trigger a large number of calculations and checks, leading to high CPU usage and a potential denial of service. The root cause is described...
CVE-2008-1080
Opera before 9.26 is affected by CVE-2008-1080, CVE-2008-1081, and CVE-2008-1082. The issues stem from input handling in file form fields, image comments, and DOM attribute value representation in imported XML documents, allowing a remote attacker to trigger file path manipulation, script executi...
CVE-2009-4071
CVE-2009-4071 affects the Opera web browser (notably Opera on Linux/Unix paths in the connected records) where, when exception stacktraces are enabled, scripting error messages from a site can be read by a different site, enabling information disclosure and cross-site scripting via unspecified ve...
CVE-2011-0687
Opera before 11.01 is vulnerable to a denial-of-service via crafted WAP documents that abuse WAP dropdown lists, caused by input validation issues (CWE-20). The issue can crash the application, with CVSS v2 base score 4.3 (Medium). Affected product/version: Opera up to 11.01 (as described in mult...
CVE-2011-2632
Opera before 11.11 is affected by CVE-2011-2632 due to improper destruction of a Silverlight instance, allowing a remote attacker to crash the application via a crafted web page (e.g., vod.onet.pl). Mitigation in connected documents recommends upgrading to a newer Opera version (Gentoo GLSA 20120...
CVE-2011-2635
The CVE-2011-2635 entry concerns Opera’s CSS engine: Opera before 11.10 is vulnerable to a denial-of-service (application crash) caused by using the :hover pseudo-class with transforms on floated elements. This is documented consistently across multiple vendors/advisories (e.g., Red Hat, SUSE, Ge...
CVE-2012-1251
CVE-2012-1251 affects Opera before 9.63 and stems from improper verification of X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via crafted certificates. The vulnerability is documented across multiple sources (NVD entry referencing O...
CVE-2012-1931
Opera before 11.62 on UNIX is vulnerable to a local symlink attack during printing, allowing local users to overwrite arbitrary files via a temporary file. Affected condition involves usage with an unspecified printing application. The vulnerability could enable manipulation of files with the pri...
CVE-2013-1639
Opera before 12.13 fails to send CORS preflight requests in all required cases, allowing a remote attacker to bypass CSRF protection via a crafted site that triggers a CORS request. The connected Gentoo/OpenVAS entries corroborate Opera as the affected product and advise upgrading to Opera 12.13_...
CVE-2006-6970
CVE-2006-6970 : Opera 9.10 Final can bypass Fraud Protection by appending certain characters (e.g., "." or "/") to the end of a domain, which escapes the blacklist filter. The NVD notes a remote-network vulnerability with low exploit complexity and partial confidentiality impact (no integrity or ...
CVE-2008-1082
Opera before 9.26 is affected by CVE-2008-1082 due to a flaw in handling DOM attribute values of imported XML documents, which allows bypassing sanitization filters and enables cross-site scripting (XSS). This configures a remote attacker to exploit crafted attribute values in an XML document dur...
CVE-2008-1762
Opera before 9.27 contains a memory corruption vulnerability (CVE-2008-1762) triggered by a crafted scaled image pattern in an HTML CANVAS element, allowing remote attackers to cause a crash and potentially execute arbitrary code. Affected: Opera web browser; root cause: memory corruption during ...
CVE-2008-4200
The provided connected documentation confirms CVE-2008-4200 affects Opera prior to 9.52, where the address field of a news feed may not reflect the feed’s actual URL. This can allow a remote attacker to set the field to display the URL of a page containing script controlled by the attacker, enabl...
CVE-2012-1930
Opera for UNIX precedes version 11.62 and stores temporary print files with world-readable permissions, enabling a local user to read sensitive information. Affected: Opera on UNIX; Root cause: insecure permissions on temporary print files. Impact: information disclosure at local level. Remediati...
CVE-2012-6464
Opera is affected by CVE-2012-6464 (XSS) as documented in multiple sources. The Gentoo GLSA 201406-14 and related OpenVAS entries reference Opera vulnerabilities and explicitly recommend upgrading to the latest Opera package, for Gentoo: >=www-client/opera-12.13_p1734, as the remediation. The ...
CVE-2011-0686
CVE-2011-0686 concerns Opera before 11.01, where remote attackers could trigger a denial of service (application crash) by serving crafted content on a web page (as demonstrated by vkontakte.ru). The issue affects Opera's handling of web-page content and results in an availability impact (crash) ...
CVE-2005-4210
Opera before 8.51 on Windows with an installed Input Method Editor (IME) is vulnerable. Bookmarking a site with a long title may trigger a denial of service via persistent application crash. This vulnerability is documented across multiple sources (NVD/NVD mirror entries, JVNDB entry, CVE listing...
CVE-2008-4196
CVE-2008-4196 concerns Opera before 9.52, with a cross-site scripting vulnerability that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Public advisories confirm this XSS issue as part of a set of Opera vulnerabilities reported in 2008. The connected documents...
CVE-2012-3559
CVE-2012-3559 concerns Opera on macOS before version 12.00 with an unspecified vulnerability that has unknown impact and attack vectors. The connected records consistently describe it as an "unspecified vulnerability" with a “moderate severity issue” and do not provide concrete exploit details, a...
CVE-2012-6460
CVE-2012-6460 affects Opera browser versions before 11.67 and 12.x before 12.02, where a crafted web site can truncate a dialog and potentially trigger downloading and execution of arbitrary programs. Connected sources confirm this is a browser-level vulnerability with remote code execution impli...
CVE-2018-6608
The CVE-2018-6608 entry concerns Opera’s WebRTC component, specifically version 51.0.2830.55. The vulnerability allows disclosure of a private client IP address in a STUN request after visiting a site attempting to enumerate complete client information (e.g., ip.voidsec.com). Technical details ac...
CVE-2008-1081
Opera prior to 9.26 is affected by CVE-2008-1081, where image comments can be treated as scripts when viewing image properties, enabling a user‑assisted remote attacker to execute arbitrary script. The vulnerability arises from images containing custom comments that are executed as script in the ...
CVE-2007-1563
CVE-2007-1563 affects Opera (notably Opera 9.10) where the FTP PASV response can be manipulated to force the client to connect to arbitrary servers, enabling proxied port scans and potential exposure of sensitive information. The primary affected component is Opera’s FTP protocol implementation, ...
CVE-2008-4199
Opera before 9.52 is vulnerable: it does not prevent using links from web pages to feed local-disk source files, enabling an attacker to determine the validity of local filenames via JavaScript-event detection and manipulation. Affected product/version: Opera up to 9.51.x (pre-9.52). Root cause: ...
CVE-2011-2619
CVE-2011-2619 affects Opera browser prior to 11.50. The vulnerability arises from the handling of gradients with many stops in CANVAS elements, SVG, and CSS, enabling a remote attacker to crash the application (denial of service). Several connected advisories corroborate the same description, ind...
CVE-2005-2309
CVE-2005-2309 affects Opera 8.01: a crafted JPEG image can cause a denial-of-service (CPU consumption). Demonstrated with random.jpg. Documents confirm Opera as affected and the DoS impact; no additional details on root cause or patch are provided in the supplied sources.
CVE-2007-5541
Affected software: Opera before 9.24. Vulnerabilities (CVE-2007-5541 and CVE-2007-5540): CVE-2007-5541: Unspecified vulnerability when using an external newsgroup or e-mail client; remote attackers could execute arbitrary commands via unknown vectors. This requires an external e-mail/newsgroup cl...
CVE-2008-4292
Opera before 9.52 is affected by CVE-2008-4292 due to not checking the CRL override when encountering a certificate that lacks a CRL. The NVD notes the impact is unknown. Gentoo GLSA 200811-01/Security Advisory includes this CVE among multiple Opera vulnerabilities and recommends upgrading to Ope...