NetSight
medium5.0

CVE-2012-3557

Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and …

Impact

Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site.

Affected products

VendorProductAffected versions
OperaOpera Browser
through 11.62
Versions 5.0, 5.02, 5.10, 5.11, 5.12

Weakness classification

References