Opera < 12.01 Multiple Vulnerabilities

High Log Correlation Engine Plugin ID 800853


The remote host has a web browser installed that is vulnerable to multiple attack vectors.


The remote host is running the Opera web browser.

Versions of Opera earlier than 12.01 are potentially affected by multiple vulnerabilities :

- An error exists in the handling of certain URLs that can lead to memory corruption and possible code execution. (1016)

- Errors exist in the handling of DOM elements and certain HTML characters that can lead to cross-site scripting. (1025, 1026)

- Download dialog boxes can be made small enough that users may not realize they are accepting a download and further, executing such a download. (1027)

- An attacker could cause an application crash by tricking a user into connecting to a malicious site, as demonstrated by the Lenovo 'Shop Now' page. (CVE-2012-4146)


Upgrade to Opera 12.01 or later.

See Also






Plugin Details

Severity: High

ID: 800853

Family: Web Clients

Published: 2012/08/24

Nessus ID: 61414

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

Patch Publication Date: 2012/06/14

Vulnerability Publication Date: 2012/06/14

Reference Information

CVE: CVE-2012-3561, CVE-2012-4142, CVE-2012-4143, CVE-2012-4144, CVE-2012-4145, CVE-2012-4146

BID: 53474, 54779, 54780, 54782, 54788