CVE-2012-6461 — Improper Input Validation in Browser

CWE-20 — Improper Input Validation3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.1%
top 67.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Opera Browser
Timeline
PublishedJan 2
Latest updateMay 17

Description

The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers to trigger a false indication of successful revocation-status checking by causing a failure of a single checking service.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDopera/opera_browser12.10+106

🔴Vulnerability Details

2
GHSA
GHSA-4qjc-5643-f8xr: The X↗2022-05-17
▶
CVEList
CVE-2012-6461: The X↗2013-01-02
▶
CVE-2012-6461 — Improper Input Validation in Browser | cvebase