medium5.0
CVE-2012-1926
Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction…
Impact
Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opera | Opera Browser | through 11.61 Versions 5.0, 5.02, 5.10, 5.11, 5.12 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html
- http://osvdb.org/80622
- http://secunia.com/advisories/48535
- http://www.opera.com/docs/changelogs/mac/1162/
- http://www.opera.com/docs/changelogs/unix/1162/
- http://www.opera.com/docs/changelogs/windows/1162/
- http://www.opera.com/support/kb/view/1012/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74351
- http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00012.html
- http://osvdb.org/80622
- http://secunia.com/advisories/48535
- http://www.opera.com/docs/changelogs/mac/1162/
- http://www.opera.com/docs/changelogs/unix/1162/
- http://www.opera.com/docs/changelogs/windows/1162/
- http://www.opera.com/support/kb/view/1012/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74351