PT-2012-4806 · Opera · Opera

Published 2012-06-14 · Updated 2012-06-20 · CVE-2012-3555

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.65

Description The issue makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site, related to a "hidden keyboard navigation" issue. This occurs because the software does not ensure that keyboard sequences are associated with a visible window.

Recommendations For Opera versions prior to 11.65, update to version 11.65 or later to resolve the issue.

Fix

Related Identifiers

CVE-2012-3555

Affected Products

Opera

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-3555 · Security Note
• http://opera.com/support/kb/view/1021 · Vendor Advisory
• http://opera.com/docs/changelogs/unix/1200 · Note
• http://opera.com/docs/changelogs/mac/1200 · Note
• http://opera.com/docs/changelogs/windows/1200 · Note
• http://opera.com/docs/changelogs/mac/1165 · Note