Detections
Analytics
Opera < 12.15 Multiple Vulnerabilities
high Log Correlation Engine Plugin ID 800866
Synopsis
The remote host has a web browser installed that is vulnerable by multiple vulnerabilitiesDescription
Versions of Opera earlier than 12.15 are potentially affected by the following vulnerabilities :- A weakness exists in the RC4 encryption protocol, allowing an attacker to derive the plaintext. (1046)
- A weakness exists due to the application allowing cookies to be set for top-level domains, potentially exposing the cookie to the entire top-level domain. A malicious site could redirect the user to another website within the same top-level domain causing it to reuse its cookie. (1047)
- An unspecified, moderate severity issue exists that has an unspecified impact.
Solution
Upgrade to Opera 12.15 or later.See Also
http://www.opera.com/support/kb/view/1046
Plugin Details
Severity: High
ID: 800866
Family: Web Clients
Published: 4/11/2013
Nessus ID: 65927
Risk Information
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.2
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N
Vulnerability Information
Patch Publication Date: 4/4/2013
Vulnerability Publication Date: 4/4/2013
Reference Information
CVE: CVE-2013-3210, CVE-2013-3211