Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM elements, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted HTML document.

The remote host is affected by the vulnerability described in GLSA-201209-11 (Opera: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Opera. Please review       the CVE identifiers and Opera Release Notes referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted web       page using Opera, possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
      Furthermore, a remote attacker may be able to trick a user into       downloading and executing files, conduct Cross-Site Scripting (XSS)       attacks, spoof the address bar, or have other unspecified impact.
  Workaround :

    There is no known workaround at this time.

The remote host is running the Opera web browser.  

Versions of Opera earlier than 12.01 are potentially affected by multiple vulnerabilities :

  - An error exists in the handling of certain URLs that can lead to memory corruption and possible code execution. (1016)

  - Errors exist in the handling of DOM elements and certain HTML characters that can lead to cross-site scripting. (1025, 1026)

  - Download dialog boxes can be made small enough that users may not realize they are accepting a download and further, executing such a download. (1027)

  - An attacker could cause an application crash by tricking a user into connecting to a malicious site, as demonstrated by the Lenovo 'Shop Now' page. (CVE-2012-4146)

The version of Opera installed on the remote host is earlier than 12.01 and is, therefore, reportedly affected by multiple issues :

  - An error exists in the handling of certain URLs that     can lead to memory corruption and possible code     execution. (1016)

  - Errors exist in the handling of DOM elements and     certain HTML characters that can lead to cross-site     scripting. (1025, 1026)

  - Download dialog boxes can be made small enough that     users may not realize they are accepting a download     and further, executing such a download. (1027)

  - An attacker could cause an application crash by tricking     a user into connecting to a malicious site, as     demonstrated by the Lenovo 'Shop Now' page.     (CVE-2012-4146)

ID	Name	Product	Family	Severity
62301	GLSA-201209-11 : Opera: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
6551	Opera < 12.01 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
61414	Opera < 12.01 Multiple Vulnerabilities	Nessus	Windows	critical

Detections

Analytics

CVE-2012-4144

medium

Tenable Plugins

critical

high

critical