CVE-2012-3558
low
CVSS v3
—
CVSS v2
2.6
VIR risk
2.6
Description
Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — http://www.opera.com/support/kb/view/1018/
Application impact
References
- http://www.opera.com/docs/changelogs/mac/1165/
- http://www.opera.com/docs/changelogs/mac/1200/
- http://www.opera.com/docs/changelogs/unix/1200/
- http://www.opera.com/docs/changelogs/windows/1200/
- http://www.opera.com/support/kb/view/1018/
- http://www.opera.com/docs/changelogs/mac/1165/
- http://www.opera.com/docs/changelogs/mac/1200/
- http://www.opera.com/docs/changelogs/unix/1200/
- http://www.opera.com/docs/changelogs/windows/1200/
- http://www.opera.com/support/kb/view/1018/
CWEs
CWE-264
Verify integrity in audit chain (admin only). AS-IS.