Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long HTTP response.

The remote host is affected by the vulnerability described in GLSA-201406-14 (Opera: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Opera. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted web       page using Opera, possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
      Furthermore, a remote attacker may be able to obtain sensitive       information, conduct Cross-Site Scripting (XSS) attacks, or bypass       security restrictions.
    A local attacker may be able to obtain sensitive information.
  Workaround :

    There is no known workaround at this time.

The remote host is running the Opera web browser. 

Versions of Opera earlier than 12.11 are potentially affected by the following vulnerabilities :

  - A heap-based buffer overflow error exists related to handling HTTP responses that can lead to application crashes or arbitrary code execution. (1036)

  - An issue exists related to the application's error handling that can allow a malicious website to determine the existence of and path to local files. (1037)

The version of Opera installed on the remote host is earlier than 12.11 and is, therefore, reportedly affected by the following vulnerabilities :

  - A heap-based buffer overflow error exists related to     handling HTTP responses that can lead to application     crashes or arbitrary code execution. (1036)

  - An issue exists related to the application's error     handling that can allow a malicious website to determine     the existence of and path to local files. (1037)

ID	Name	Product	Family	Severity
76065	GLSA-201406-14 : Opera: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
6621	Opera < 12.11 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
62984	Opera < 12.11 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2012-6468

critical

Tenable Plugins

high

high

high