Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.

The remote host is affected by the vulnerability described in GLSA-201406-14 (Opera: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Opera. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted web       page using Opera, possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
      Furthermore, a remote attacker may be able to obtain sensitive       information, conduct Cross-Site Scripting (XSS) attacks, or bypass       security restrictions.
    A local attacker may be able to obtain sensitive information.
  Workaround :

    There is no known workaround at this time.

The remote host is running the Opera web browser. 

Versions of Opera earlier than 12.13 are potentially affected by the following vulnerabilities :

  - An error exists related to DOM manipulation that could lead to application crashes or arbitrary code execution. (1042)

  - An error exists related to SVG 'clipPaths' that could lead to memory corruption or arbitrary code execution. (1043)

  - The application could fail to make the proper 'pre-flight' Cross-Origin Resource Sharing (CORS) requests. In some situations this error could aid an attacker in cross-site request forgery (XSRF) attacks. (1045)

  - An unspecified, low severity issue exists that has an unspecified impact.

The version of Opera installed on the remote host is earlier than 12.13 and is, therefore, reportedly affected by the following vulnerabilities :

  - An error exists related to DOM manipulation that could     lead to application crashes or arbitrary code     execution. (1042)

  - A use-after-free error exists related to SVG 'clipPaths'     that could lead to memory corruption or arbitrary code     execution. (1043)

  - An error exists related to the TLS protocol, CBC mode     encryption and response time. An attacker could obtain     plaintext contents of encrypted traffic via timing     attacks. (1044)

  - The application could fail to make the proper 'pre-     flight' Cross-Origin Resource Sharing (CORS) requests.
    In some situations this error could aid an attacker in     cross-site request forgery (CSRF) attacks. (1045)

  - An unspecified, low severity issue exists that has an     unspecified impact.

ID	Name	Product	Family	Severity
76065	GLSA-201406-14 : Opera: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
6680	Opera < 12.13 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
64363	Opera < 12.13 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2013-1638

critical

Tenable Plugins

high

high

high