PT-2019-12730 · Opera · Opera

Publicado 2019-08-01 · Atualizado 2020-08-24 · CVE-2019-12278

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera versions through 53 on Android

Description The issue allows Address Bar Spoofing due to the mishandling of several Unicode characters, which are displayed in Right-to-Left order. This can cause the rendering mechanism to improperly operate on a numerical IP address or an alphabetic string, leading to a spoofed URL.

Recommendations For Opera versions through 53 on Android, update to a version that fixes the Address Bar Spoofing issue to prevent potential URL spoofing attacks.

Exploit

Correção

Identificadores relacionados

CVE-2019-12278

Produtos afetados

Opera

Referências · 6

• 🔥 https://medium.com/bugbountywriteup/opera-android-address-bar-spoofing-cve-2019-12278-9ffcfd6c508c · Exploit
• https://t.me/cvenotify/1616 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-12278 · Nota de Segurança
• https://help.opera.com/en/latest/security-and-privacy · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-12278 · Aviso do Fabricante
• https://t.me/thebugbountyhunter/2955 · Publicação no Telegram