Opera Browser vulnerabilities

CVE-2012-6467 [MEDIUM] CVE-2012-6467: Opera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2) other Opera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2) other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012.

CVE-2007-4367 [CRITICAL] CWE-763 CVE-2007-4367: Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that trig Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer."

CVE-2010-1349 [CRITICAL] CWE-189 CVE-2010-1349: Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow.

CVE-2013-1638 [CRITICAL] CWE-94 CVE-2013-1638: Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.

CVE-2011-2628 [CRITICAL] CWE-20 CVE-2011-2628: Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to e Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to page unload.

CVE-2012-6470 [CRITICAL] CWE-119 CVE-2012-6470: Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers t Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a malformed image.

CVE-2007-0126 [CRITICAL] CWE-119 CVE-2007-0126: Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPE Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker.

CVE-2011-4684 [CRITICAL] CWE-310 CVE-2011-4684: Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases."

CVE-2008-5680 [CRITICAL] CVE-2008-5680: Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted text area, or allow (2) user-assisted remote attackers to execute arbitrary code via a long host name in a file: URL. NOTE: this might overlap CVE-2008-5178.

CVE-2008-1762 [CRITICAL] CWE-399 CVE-2008-1762: Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption.

CVE-2008-4694 [CRITICAL] CWE-59 CVE-2008-4694: Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a redirect that specifies a crafted URL.

CVE-2003-0870 [HIGH] CWE-787 CVE-2003-0870: Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name.

CVE-2003-1387 [HIGH] CWE-120 CVE-2003-1387: Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to exec Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username.

CVE-2004-1491 [MEDIUM] CVE-2004-1491: Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attacke Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec entry.

CVE-2006-1834 [MEDIUM] CWE-189 CVE-2006-1834: Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem makes the attack easier with shorter strings.

CVE-2013-1637 [CRITICAL] CWE-94 CVE-2013-1637: Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM event Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events.

CVE-2007-2274 [HIGH] CWE-401 CVE-2007-2274: The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and application crash) via a malformed torrent file. NOTE: the original disclosure refers to this as a memory leak, but it is not certain.

CVE-2007-1563 [MEDIUM] CWE-200 CVE-2007-1563: The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to fo The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.

CVE-2003-1396 [MEDIUM] CWE-787 CVE-2003-1396: Heap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial of s Heap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a filename with a long extension.

CVE-2007-1377 [MEDIUM] CVE-2007-1377: AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remo AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236.