Opera Web Browser CVE-2012-4010 Address Bar URI Spoofing Vulnerability

Bugtraq ID:	55345
Class:	Input Validation Error
CVE:	CVE-2012-4010
Remote:	Yes
Local:	No
Published:	Aug 30 2012 12:00AM
Updated:	Mar 19 2015 08:32AM
Credit:	Masahiro Yamada
Vulnerable:	Opera Software Opera Web Browser 9.64 Opera Software Opera Web Browser 9.63 Opera Software Opera Web Browser 9.62 Opera Software Opera Web Browser 9.61 Opera Software Opera Web Browser 9.60 beta 1 Opera Software Opera Web Browser 9.60 Opera Software Opera Web Browser 9.52 Opera Software Opera Web Browser 9.51 Opera Software Opera Web Browser 11.52 Opera Software Opera Web Browser 11.51 Opera Software Opera Web Browser 11.50 Opera Software Opera Web Browser 11.11 Opera Software Opera Web Browser 11.10 Opera Software Opera Web Browser 11.01 Opera Software Opera Web Browser 11.00 Opera Software Opera Web Browser 10.63 Opera Software Opera Web Browser 10.62 Opera Software Opera Web Browser 10.61 Opera Software Opera Web Browser 10.60 Beta1 Opera Software Opera Web Browser 10.60 Opera Software Opera Web Browser 10.60 Opera Software Opera Web Browser 10.54 Opera Software Opera Web Browser 10.54 Gentoo Linux
Not Vulnerable:	Opera Software Opera Web Browser 11.60

Opera Web Browser CVE-2012-4010 Address Bar URI Spoofing Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to view a maliciously crafted web document.

Opera Web Browser CVE-2012-4010 Address Bar URI Spoofing Vulnerability

Solution:
Updates are available. Please see the references for more information.

Opera Web Browser CVE-2012-4010 Address Bar URI Spoofing Vulnerability

References:

• JVNDB-2012-000080 Opera address bar spoofing vulnerability (JVNDB)
  
• Opera 11.60 for Windows changelog (Opera Software)
  
• Opera Homepage (Opera Software)