CVE-2012-3558

low
Published 2012-06-14 · Modified 2026-04-29
CVSS v3
CVSS v2
2.6
VIR risk
2.6

Description

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — http://www.opera.com/support/kb/view/1018/

Application impact

VendorProductVersionsFixed
operaopera_browser{"endIncluding":"11.64"}
operaopera_browser5.0
operaopera_browser5.02
operaopera_browser5.10
operaopera_browser5.11
operaopera_browser5.12
operaopera_browser6.0
operaopera_browser6.1
operaopera_browser6.01
operaopera_browser6.02
operaopera_browser6.03
operaopera_browser6.04
operaopera_browser6.05
operaopera_browser6.06
operaopera_browser6.11
operaopera_browser6.12
operaopera_browser7.0
operaopera_browser7.01
operaopera_browser7.02
operaopera_browser7.03
operaopera_browser7.10
operaopera_browser7.11
operaopera_browser7.20
operaopera_browser7.21
operaopera_browser7.22
operaopera_browser7.23
operaopera_browser7.50
operaopera_browser7.51
operaopera_browser7.52
operaopera_browser7.53
operaopera_browser7.54
operaopera_browser8.0
operaopera_browser8.01
operaopera_browser8.02
operaopera_browser8.50
operaopera_browser8.51
operaopera_browser8.52
operaopera_browser8.53
operaopera_browser8.54
operaopera_browser9.0
operaopera_browser9.01
operaopera_browser9.02
operaopera_browser9.10
operaopera_browser9.20
operaopera_browser9.21
operaopera_browser9.22
operaopera_browser9.23
operaopera_browser9.24
operaopera_browser9.25
operaopera_browser9.26
operaopera_browser9.27
operaopera_browser9.50
operaopera_browser9.51
operaopera_browser9.52
operaopera_browser9.60
operaopera_browser9.61
operaopera_browser9.62
operaopera_browser9.63
operaopera_browser9.64
operaopera_browser10.00
operaopera_browser10.01
operaopera_browser10.10
operaopera_browser10.11
operaopera_browser10.50
operaopera_browser10.51
operaopera_browser10.52
operaopera_browser10.53
operaopera_browser10.54
operaopera_browser10.60
operaopera_browser10.61
operaopera_browser10.62
operaopera_browser10.63
operaopera_browser11.00
operaopera_browser11.01
operaopera_browser11.10
operaopera_browser11.11
operaopera_browser11.50
operaopera_browser11.51
operaopera_browser11.52
operaopera_browser11.60
operaopera_browser11.61
operaopera_browser11.62

References

CWEs

CWE-264

Verify integrity in audit chain (admin only). AS-IS.