Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown impact and attack vectors, related to a "low severity issue."

The remote host is affected by the vulnerability described in GLSA-201209-11 (Opera: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Opera. Please review       the CVE identifiers and Opera Release Notes referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted web       page using Opera, possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
      Furthermore, a remote attacker may be able to trick a user into       downloading and executing files, conduct Cross-Site Scripting (XSS)       attacks, spoof the address bar, or have other unspecified impact.
  Workaround :

    There is no known workaround at this time.

The remote host is running the Opera web browser.  

Versions of Opera earlier than 12.01 are potentially affected by multiple vulnerabilities :

  - An error exists in the handling of certain URLs that can lead to memory corruption and possible code execution. (1016)

  - Errors exist in the handling of DOM elements and certain HTML characters that can lead to cross-site scripting. (1025, 1026)

  - Download dialog boxes can be made small enough that users may not realize they are accepting a download and further, executing such a download. (1027)

  - An attacker could cause an application crash by tricking a user into connecting to a malicious site, as demonstrated by the Lenovo 'Shop Now' page. (CVE-2012-4146)

The version of Opera installed on the remote host is earlier than 12.01 and is, therefore, reportedly affected by multiple issues :

  - An error exists in the handling of certain URLs that     can lead to memory corruption and possible code     execution. (1016)

  - Errors exist in the handling of DOM elements and     certain HTML characters that can lead to cross-site     scripting. (1025, 1026)

  - Download dialog boxes can be made small enough that     users may not realize they are accepting a download     and further, executing such a download. (1027)

  - An attacker could cause an application crash by tricking     a user into connecting to a malicious site, as     demonstrated by the Lenovo 'Shop Now' page.     (CVE-2012-4146)

ID	Name	Product	Family	Severity
62301	GLSA-201209-11 : Opera: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
6551	Opera < 12.01 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
61414	Opera < 12.01 Multiple Vulnerabilities	Nessus	Windows	critical

Detections

Analytics

CVE-2012-4145

critical

Tenable Plugins

critical

high

critical