CVE-2012-3560

medium

Description

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it easier for remote attackers to conduct spoofing attacks by detecting and preventing attempts to load a different web page.

References

http://www.opera.com/support/kb/view/1022/

http://www.opera.com/docs/changelogs/windows/1200/

http://www.opera.com/docs/changelogs/unix/1200/

http://www.opera.com/docs/changelogs/mac/1200/

http://www.opera.com/docs/changelogs/mac/1165/

http://blog.vulnhunt.com/index.php/2012/06/14/cal-2012-0015-opera-website-spoof/

Details

Source: Mitre, NVD

Published: 2012-06-14

Updated: 2024-11-21

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 4.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Severity: Medium