Opera < 12.01 Multiple Vulnerabilities

high Log Correlation Engine Plugin ID 800853

Synopsis

The remote host has a web browser installed that is vulnerable to multiple attack vectors.

Description

The remote host is running the Opera web browser.

Versions of Opera earlier than 12.01 are potentially affected by multiple vulnerabilities :

- An error exists in the handling of certain URLs that can lead to memory corruption and possible code execution. (1016)

- Errors exist in the handling of DOM elements and certain HTML characters that can lead to cross-site scripting. (1025, 1026)

- Download dialog boxes can be made small enough that users may not realize they are accepting a download and further, executing such a download. (1027)

- An attacker could cause an application crash by tricking a user into connecting to a malicious site, as demonstrated by the Lenovo 'Shop Now' page. (CVE-2012-4146)

Solution

Upgrade to Opera 12.01 or later.

Plugin Details

Severity: High

ID: 800853

Family: Web Clients

Published: 8/24/2012

Nessus ID: 61414

Vulnerability Information

Patch Publication Date: 6/14/2012

Vulnerability Publication Date: 6/14/2012

Reference Information

CVE: CVE-2012-3561, CVE-2012-4142, CVE-2012-4143, CVE-2012-4144, CVE-2012-4145, CVE-2012-4146

BID: 53474, 54779, 54780, 54782, 54788

Detections

Analytics