Opera < 12.01 Multiple Vulnerabilities
High Log Correlation Engine Plugin ID 800853
SynopsisThe remote host has a web browser installed that is vulnerable to multiple attack vectors.
DescriptionThe remote host is running the Opera web browser.
Versions of Opera earlier than 12.01 are potentially affected by multiple vulnerabilities :
- An error exists in the handling of certain URLs that can lead to memory corruption and possible code execution. (1016)
- Errors exist in the handling of DOM elements and certain HTML characters that can lead to cross-site scripting. (1025, 1026)
- Download dialog boxes can be made small enough that users may not realize they are accepting a download and further, executing such a download. (1027)
- An attacker could cause an application crash by tricking a user into connecting to a malicious site, as demonstrated by the Lenovo 'Shop Now' page. (CVE-2012-4146)
SolutionUpgrade to Opera 12.01 or later.