Opera Web Browser CVE-2012-6467 Multiple Open Redirection Vulnerabilities
BID:57132
Info
Opera Web Browser CVE-2012-6467 Multiple Open Redirection Vulnerabilities
| Bugtraq ID: | 57132 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-6467 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 06 2012 12:00AM |
| Updated: | Mar 19 2015 08:27AM |
| Credit: | Reported by vendor. |
| Vulnerable: |
Opera Software Opera Web Browser 8.51 Opera Software Opera Web Browser 8.50 Opera Software Opera Web Browser 8.0.2 Opera Software Opera Web Browser 8.0 2 Opera Software Opera Web Browser 8.0 1 Opera Software Opera Web Browser 7.53 Opera Software Opera Web Browser 7.52 Opera Software Opera Web Browser 7.51 Opera Software Opera Web Browser 9.64 Opera Software Opera Web Browser 9.63 Opera Software Opera Web Browser 9.62 Opera Software Opera Web Browser 9.61 Opera Software Opera Web Browser 9.60 beta 1 Opera Software Opera Web Browser 9.60 Opera Software Opera Web Browser 9.52 Opera Software Opera Web Browser 9.51 Opera Software Opera Web Browser 9.50 beta Opera Software Opera Web Browser 9.5 Opera Software Opera Web Browser 9.27 Opera Software Opera Web Browser 9.26 Opera Software Opera Web Browser 9.25 Opera Software Opera Web Browser 9.24 Opera Software Opera Web Browser 9.23 Opera Software Opera Web Browser 9.22 Opera Software Opera Web Browser 9.21 Opera Software Opera Web Browser 9.20 beta 1 Opera Software Opera Web Browser 9.20 Opera Software Opera Web Browser 9.10 Opera Software Opera Web Browser 9.02 Opera Software Opera Web Browser 9.01 Opera Software Opera Web Browser 9 Opera Software Opera Web Browser 8.54 Opera Software Opera Web Browser 8.53 Opera Software Opera Web Browser 8.52 Opera Software Opera Web Browser 8 Beta 3 Opera Software Opera Web Browser 12.02 Opera Software Opera Web Browser 12.01 Opera Software Opera Web Browser 12.01 Opera Software Opera Web Browser 12.00 Opera Software Opera Web Browser 12 Opera Software Opera Web Browser 11.67 Opera Software Opera Web Browser 11.66 Opera Software Opera Web Browser 11.65 Opera Software Opera Web Browser 11.64 Opera Software Opera Web Browser 11.62 Opera Software Opera Web Browser 11.61 Opera Software Opera Web Browser 11.60 Opera Software Opera Web Browser 11.52 Opera Software Opera Web Browser 11.52 Opera Software Opera Web Browser 11.51 Opera Software Opera Web Browser 11.51 Opera Software Opera Web Browser 11.50 Opera Software Opera Web Browser 11.11 Opera Software Opera Web Browser 11.10 Opera Software Opera Web Browser 11.01 Opera Software Opera Web Browser 11.00 Opera Software Opera Web Browser 10.63 Opera Software Opera Web Browser 10.62 Opera Software Opera Web Browser 10.61 Opera Software Opera Web Browser 10.60 Beta1 Opera Software Opera Web Browser 10.60 Opera Software Opera Web Browser 10.60 Opera Software Opera Web Browser 10.54 Opera Software Opera Web Browser 10.54 Opera Software Opera Web Browser 10.53 B Opera Software Opera Web Browser 10.53 Opera Software Opera Web Browser 10.52 Opera Software Opera Web Browser 10.51 Opera Software Opera Web Browser 10.50 Opera Software Opera Web Browser 10.10 Opera Software Opera Web Browser 10.1 Opera Software Opera Web Browser 10.01 Opera Software Opera Web Browser 10.00 Opera Software Opera Web Browser 10 Gentoo Linux |
| Not Vulnerable: |
Opera Software Opera Web Browser 12.10 |
Discussion
Opera Web Browser CVE-2012-6467 Multiple Open Redirection Vulnerabilities
Opera Web Browser is prone to multiple open-redirection vulnerabilities.
An attacker can leverage these issues by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
Opera Web Browser versions prior to 12.10 are affected.
Opera Web Browser is prone to multiple open-redirection vulnerabilities.
An attacker can leverage these issues by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible.
Opera Web Browser versions prior to 12.10 are affected.
Exploit / POC
Opera Web Browser CVE-2012-6467 Multiple Open Redirection Vulnerabilities
An attacker can exploit these issues by enticing an unsuspecting victim to following a malicious URI.
An attacker can exploit these issues by enticing an unsuspecting victim to following a malicious URI.
Solution / Fix
Opera Web Browser CVE-2012-6467 Multiple Open Redirection Vulnerabilities
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
Opera Web Browser CVE-2012-6467 Multiple Open Redirection Vulnerabilities
References:
References:
- Opera 12.10 Changelog (Opera Software)
- Opera Homepage (Opera Software)
- CVE-2012-6467: Internet shortcuts used for phishing in
elements (Opera Software)