CVE-2012-3555
high
CVSS v3
—
CVSS v2
7.6
VIR risk
7.6
Description
Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site, related to a "hidden keyboard navigation" issue.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — http://www.opera.com/support/kb/view/1021/
Application impact
References
- http://www.opera.com/docs/changelogs/mac/1165/
- http://www.opera.com/docs/changelogs/mac/1200/
- http://www.opera.com/docs/changelogs/unix/1200/
- http://www.opera.com/docs/changelogs/windows/1200/
- http://www.opera.com/support/kb/view/1021/
- http://www.opera.com/docs/changelogs/mac/1165/
- http://www.opera.com/docs/changelogs/mac/1200/
- http://www.opera.com/docs/changelogs/unix/1200/
- http://www.opera.com/docs/changelogs/windows/1200/
- http://www.opera.com/support/kb/view/1021/
Verify integrity in audit chain (admin only). AS-IS.