PT-2019-12730 · Opera · Opera

Published 2019-08-01 · Updated 2020-08-24 · CVE-2019-12278

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera versions through 53 on Android

Description The issue allows Address Bar Spoofing due to the mishandling of several Unicode characters, which are displayed in Right-to-Left order. This can cause the rendering mechanism to improperly operate on a numerical IP address or an alphabetic string, leading to a spoofed URL.

Recommendations For Opera versions through 53 on Android, update to a version that fixes the Address Bar Spoofing issue to prevent potential URL spoofing attacks.

Exploit

Fix

Related Identifiers

CVE-2019-12278

Affected Products

Opera

References · 6

• 🔥 https://medium.com/bugbountywriteup/opera-android-address-bar-spoofing-cve-2019-12278-9ffcfd6c508c · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-12278 · Security Note
• https://help.opera.com/en/latest/security-and-privacy · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-12278 · Vendor Advisory
• https://t.me/cvenotify/1616 · Telegram Post
• https://t.me/thebugbountyhunter/2955 · Telegram Post