PT-2011-5027 · Opera · Opera

Published 2011-12-07 · Updated 2012-03-06 · CVE-2011-4681

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60

Description The issue allows remote attackers to bypass the Same Origin Policy by leveraging access to a different domain name in the same top-level domain. This can be demonstrated by the .no or .uk domain, where the number of . (dot) characters in domain names of different top-level domains is not properly considered.

Recommendations For Opera versions prior to 11.60, update to version 11.60 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-4681

Affected Products

Opera

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2011-4681 · Security Note
• http://opera.com/support/kb/view/1003 · Vendor Advisory
• http://opera.com/docs/changelogs/mac/1160 · Note
• http://opera.com/support/kb/view/1005 · Note
• http://opera.com/docs/changelogs/windows/1160 · Note
• http://opera.com/docs/changelogs/unix/1160 · Note
• http://opera.com/support/kb/view/1004 · Note