Mageni Mageni Security LLC

Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Opera Multiple Vulnerabilities-03 Jan13 (Mac OS X)

Information

Severity

Severity

Critical

Family

Family

General

CVSSv2 Base

CVSSv2 Base

9.3

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Solution Type

Solution Type

Vendor Patch

Created

Created

11 years ago

Modified

Modified

5 years ago

Share

Summary

The host is installed with Opera and is prone to multiple vulnerabilities.

Insight

Insight

- Internet shortcuts used for phishing in '<img>' elements. - Specially crafted WebP images can be used to disclose random chunks of memory. - Specially crafted SVG images can allow execution of arbitrary code. - Cross domain access to object constructors can be used to facilitate cross-site scripting. - Data URIs can be used to facilitate Cross-Site Scripting. - CORS requests can incorrectly retrieve contents of cross origin pages. - Certificate revocation service failure may cause Opera to show an unverified site as secur.

Affected Software

Affected Software

Opera version before 12.10 on Mac OS X

Solution

Solution

Upgrade to Opera version 12.10 or later.

Common Vulnerabilities and Exposures (CVE)

References