Opera Web Browser Prior to 12.13 Multiple Security Vulnerabilities

Bugtraq ID:	57633
Class:	Unknown
CVE:	CVE-2013-1637 CVE-2013-1638 CVE-2013-1639
Remote:	Yes
Local:	No
Published:	Jan 30 2013 12:00AM
Updated:	Mar 19 2015 08:18AM
Credit:	Reported by vendor, Arthur Gerkis and an anonymous person via iSIGHT Partners GVP Program.
Vulnerable:	Opera Software Opera Web Browser 9.64 Opera Software Opera Web Browser 9.63 Opera Software Opera Web Browser 9.62 Opera Software Opera Web Browser 9.61 Opera Software Opera Web Browser 9.60 beta 1 Opera Software Opera Web Browser 9.60 Opera Software Opera Web Browser 9.52 Opera Software Opera Web Browser 9.51 Opera Software Opera Web Browser 9.50 beta Opera Software Opera Web Browser 9.5 Opera Software Opera Web Browser 9.27 Opera Software Opera Web Browser 9.26 Opera Software Opera Web Browser 9.25 Opera Software Opera Web Browser 9.24 Opera Software Opera Web Browser 9.23 Opera Software Opera Web Browser 9.22 Opera Software Opera Web Browser 9.21 Opera Software Opera Web Browser 9.20 beta 1 Opera Software Opera Web Browser 9.20 Opera Software Opera Web Browser 9.10 Opera Software Opera Web Browser 9.02 Opera Software Opera Web Browser 9.01 Opera Software Opera Web Browser 9 Opera Software Opera Web Browser 12.12 Opera Software Opera Web Browser 12.11 Opera Software Opera Web Browser 12.10 Opera Software Opera Web Browser 12.02 Opera Software Opera Web Browser 12.01 Opera Software Opera Web Browser 12.00 Opera Software Opera Web Browser 12 Opera Software Opera Web Browser 11.67 Opera Software Opera Web Browser 11.66 Opera Software Opera Web Browser 11.65 Opera Software Opera Web Browser 11.64 Opera Software Opera Web Browser 11.62 Opera Software Opera Web Browser 11.61 Opera Software Opera Web Browser 11.60 Opera Software Opera Web Browser 11.52 Opera Software Opera Web Browser 11.52 Opera Software Opera Web Browser 11.51 Opera Software Opera Web Browser 11.50 Opera Software Opera Web Browser 11.11 Opera Software Opera Web Browser 11.10 Opera Software Opera Web Browser 11.01 Opera Software Opera Web Browser 11.00 Opera Software Opera Web Browser 10.63 Opera Software Opera Web Browser 10.62 Opera Software Opera Web Browser 10.61 Opera Software Opera Web Browser 10.60 Opera Software Opera Web Browser 10.60 Opera Software Opera Web Browser 10.54 Opera Software Opera Web Browser 10.54 Opera Software Opera Web Browser 10.53 Opera Software Opera Web Browser 10.52 Opera Software Opera Web Browser 10.51 Opera Software Opera Web Browser 10.50 Opera Software Opera Web Browser 10.10 Opera Software Opera Web Browser 10.1 Opera Software Opera Web Browser 10.01 Opera Software Opera Web Browser 10 Gentoo Linux
Not Vulnerable:	Opera Software Opera Web Browser 12.13

Opera Web Browser Prior to 12.13 Multiple Security Vulnerabilities

Opera Web Browser is prone multiple remote-code-execution vulnerabilities and a cross-site request-forgery vulnerability.

A successful exploit will result in the execution of arbitrary code and perfrom unauthorized actions in the context of the user running the affected application. Failed exploits may result in denial-of-service conditions.

Opera Web Browser versions prior to 12.13 are vulnerable.

Opera Web Browser Prior to 12.13 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Opera Web Browser Prior to 12.13 Multiple Security Vulnerabilities

References:

• Opera Homepage (Opera Software)
  
• Release notes Opera 12.13 (Opera Software)
  
• Advisory: CORS requests can omit the preflight request (Opera)
  
• Advisory: DOM events manipulation might be used to execute arbitrary code (Opera)
  
• Advisory: Use of SVG clipPaths can allow execution of arbitrary code Severity (Opera)