Opera Web Browser Buffer Overflow and Information Disclosure Vulnerabilities

Bugtraq ID:	56594
Class:	Design Error
CVE:	CVE-2012-6469 CVE-2012-6468
Remote:	Yes
Local:	No
Published:	Nov 20 2012 12:00AM
Updated:	Jun 16 2014 08:13AM
Credit:	The vendor reported these issues.
Vulnerable:	Opera Software Opera Web Browser 11.64 Opera Software Opera Web Browser 11.62 Opera Software Opera Web Browser 11.61 Opera Software Opera Web Browser 11.60 Opera Software Opera Web Browser 11.52 Opera Software Opera Web Browser 11.50 Opera Software Opera Web Browser 11.11 Opera Software Opera Web Browser 11.10 Opera Software Opera Web Browser 11.01 Opera Software Opera Web Browser 11.00 Opera Opera Web Browser 11.52 Opera Opera Web Browser 11.51 Gentoo Linux
Not Vulnerable:

Opera Web Browser Buffer Overflow and Information Disclosure Vulnerabilities

Opera Web Browser is prone to the following vulnerabilities:

1. A heap-based buffer-overflow vulnerability

2. An information-disclosure vulnerability

Successful exploits can allow attackers to obtain sensitive information or to execute arbitrary code in the context of the affected application. Failed attempts may lead to a denial-of-service condition.

Versions prior to Opera Web Browser 12.11 are vulnerable.

Opera Web Browser Buffer Overflow and Information Disclosure Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Opera Web Browser Buffer Overflow and Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Opera Web Browser Buffer Overflow and Information Disclosure Vulnerabilities

References:

• Opera Home Page (Opera Software)