Cross-Site Scripting Vulnerability in Opera Web Browser
CVE-2012-6463

Currently unrated

Key Information:

Vendor
Opera
Status
Opera Browser
Vendor
CVE Published:
2 January 2013

Summary

A cross-site scripting (XSS) vulnerability exists in the Opera web browser prior to version 12.10. This flaw allows remote attackers to inject arbitrary web scripts or HTML into web pages through unspecified sequences of document and data URL loading. Due to this vulnerability, a malicious user could exploit the flaw to execute arbitrary code in the context of the affected user's browser session, leading to potential data theft or other malicious activities.

References

http://www.opera.com/docs/changelogs/unified/1210/
x_refsource_CONFIRM
http://www.opera.com/support/kb/view/1031/
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.