CVEvulnerability
CVE-2012-3560
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-06-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it easier for remote attackers to conduct spoofing attacks by detecting and preventing attempts to load a different web page.
Affected configurations
• opera opera browser (<= 11.64)
• opera opera browser 5.0
• opera opera browser 5.02
• opera opera browser 5.10
• opera opera browser 5.11
• opera opera browser 5.12
• opera opera browser 6.0
• opera opera browser 6.1
• opera opera browser 6.01
• opera opera browser 6.02
• opera opera browser 6.03
• opera opera browser 6.04
• opera opera browser 6.05
• opera opera browser 6.06
• opera opera browser 6.11
• opera opera browser 6.12
• opera opera browser 7.0
• opera opera browser 7.01
• opera opera browser 7.02
• opera opera browser 7.03
• opera opera browser 7.10
• opera opera browser 7.11
• opera opera browser 7.20
• opera opera browser 7.21
• opera opera browser 7.22
• opera opera browser 7.23
• opera opera browser 7.50
• opera opera browser 7.51
• opera opera browser 7.52
• opera opera browser 7.53
• opera opera browser 7.54
• opera opera browser 8.0
• opera opera browser 8.01
• opera opera browser 8.02
• opera opera browser 8.50
• opera opera browser 8.51
• opera opera browser 8.52
• opera opera browser 8.53
• opera opera browser 8.54
• opera opera browser 9.0
• opera opera browser 9.01
• opera opera browser 9.02
• opera opera browser 9.10
• opera opera browser 9.20
• opera opera browser 9.21
• opera opera browser 9.22
• opera opera browser 9.23
• opera opera browser 9.24
• opera opera browser 9.25
• opera opera browser 9.26
• opera opera browser 9.27
• opera opera browser 9.50
• opera opera browser 9.51
• opera opera browser 9.52
• opera opera browser 9.60
• opera opera browser 9.61
• opera opera browser 9.62
• opera opera browser 9.63
• opera opera browser 9.64
• opera opera browser 10.00
… and 22 more
Related
Weakness · not in database (1)
References
- http://blog.vulnhunt.com/index.php/2012/06/14/cal-2012-0015-opera-website-spoof/ blog.vulnhunt.com
- http://www.opera.com/docs/changelogs/mac/1165/ www.opera.com
- http://www.opera.com/docs/changelogs/mac/1200/ www.opera.com
- http://www.opera.com/docs/changelogs/unix/1200/ www.opera.com
- http://www.opera.com/docs/changelogs/windows/1200/ www.opera.com
- http://www.opera.com/support/kb/view/1022/ Vendor Advisory
- http://blog.vulnhunt.com/index.php/2012/06/14/cal-2012-0015-opera-website-spoof/ blog.vulnhunt.com
- http://www.opera.com/docs/changelogs/mac/1165/ www.opera.com
- http://www.opera.com/docs/changelogs/mac/1200/ www.opera.com
- http://www.opera.com/docs/changelogs/unix/1200/ www.opera.com
- http://www.opera.com/docs/changelogs/windows/1200/ www.opera.com
- http://www.opera.com/support/kb/view/1022/ Vendor Advisory