CVE-2011-4682: Medium severity web browser for android vulnerability
Published Dec 7, 2011
·Updated
The JavaScript engine in Opera before 11.60 does not properly implement the in operator, which allows remote attackers to bypass the Same Origin Policy via vectors related to variables on different web sites.
Affected Software
123 affected components
opera Opera Browser=7.01
opera Opera Browser=9.27
opera Opera Browser=7.23
opera Opera Browser=9.50-beta1
opera Opera Browser=9.02
opera Opera Browser=10.53-b
opera Opera Browser=7.03
opera Opera Browser=10.10
opera Opera Browser=11.50-alpha
opera Opera Browser=7.53
opera Opera Browser=8.50
opera Opera Browser=9.50
opera Opera Browser=11.10-alpha
opera Opera Browser=9.24
opera Opera Browser=11.50
opera Opera Browser=5.0-beta2
opera Opera Browser=10.61
opera Opera Browser=5.11
opera Opera Browser=9.63
opera Opera Browser=6.1
opera Opera Browser=7.20
opera Opera Browser=6.02
opera Opera Browser=9.51
opera Opera Browser=5.02
opera Opera Browser=10.00
opera Opera Browser=9.26
opera Opera Browser=10.50
opera Opera Browser=5.10
opera Opera Browser=8.53
opera Opera Browser=9.12
opera Opera Browser=7.11-beta2
opera Opera Browser=8.0
opera Opera Browser=10.62
opera Opera Browser=11.50-beta
opera Opera Browser=10.00-beta3
opera Opera Browser=6.04
opera Opera Browser=8.54
opera Opera Browser=11.00-alpha
opera Opera Browser=6.11
opera Opera Browser=5.0-beta4
opera Opera Browser=6.05
opera Opera Browser=8.02
opera Opera Browser=9.20
opera Opera Browser=7.50-beta1
opera Opera Browser=5.12
opera Opera Browser=11.52
opera Opera Browser=9.21
opera Opera Browser<=11.60
opera Opera Browser=11.51
opera Opera Browser=7.10
opera Opera Browser=9.0-beta1
opera Opera Browser=6.0-tp3
opera Opera Browser=9.23
opera Opera Browser=6.0-tp1
opera Opera Browser=8.0-beta3
opera Opera Browser=11.10-beta
opera Opera Browser=10.60-beta1
opera Opera Browser=5.0-beta8
opera Opera Browser=10.52
opera Opera Browser=10.51
opera Opera Browser=9.60
opera Opera Browser=7.0-beta1_v2
opera Opera Browser=10.54
opera Opera Browser=8.51
opera Opera Browser=5.0-beta5
opera Opera Browser=7.50
opera Opera Browser=7.02
opera Opera Browser=7.21
opera Opera Browser=6.0-tp2
opera Opera Browser=5.0-beta7
opera Opera Browser=10.50-beta1
opera Opera Browser=7.20-beta7
opera Opera Browser=7.54-update1
opera Opera Browser=9.64
opera Opera Browser=9.20-beta1
opera Opera Browser=10.53
opera Opera Browser=7.60
opera Opera Browser=7.11
opera Opera Browser=11.00-beta
opera Opera Browser=7.0-beta2
opera Opera Browser=7.54
opera Opera Browser=9.0-beta2
opera Opera Browser=6.03
opera Opera Browser=7.0-beta1
opera Opera Browser=11.01
opera Opera Browser=9.22
opera Opera Browser=6.0-beta1
opera Opera Browser=9.01
opera Opera Browser=9.0
opera Opera Browser=5.0
opera Opera Browser=9.25
opera Opera Browser=7.51
opera Opera Browser=8.0-beta2
opera Opera Browser=9.10
opera Opera Browser=10.00-beta1
opera Opera Browser=9.50-beta2
opera Opera Browser=6.12
opera Opera Browser=9.60-beta1
opera Opera Browser=9.62
opera Opera Browser=10.00-beta2
opera Opera Browser=6.0-beta2
opera Opera Browser=5.0-beta3
opera Opera Browser=6.01
opera Opera Browser=8.52
opera Opera Browser=10.50-beta2
opera Opera Browser=6.06
opera Opera Browser=10.60
opera Opera Browser=7.52
opera Opera Browser=7.54-update2
opera Opera Browser=5.0-beta6
opera Opera Browser=8.01
opera Opera Browser=6.1-beta1
opera Opera Browser=10.63
opera Opera Browser=10.10-beta1
opera Opera Browser=9.61
opera Opera Browser=10.01
opera Opera Browser=9.52
opera Opera Browser=8.0-beta1
opera Opera Browser=11.00
opera Opera Browser=6.0
opera Opera Browser=7.22
opera Opera Browser=7.10-beta1
opera Opera Browser=7.0
Event History
Dec 7, 2011
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4682?
CVE-2011-4682 has been classified as a high-severity vulnerability due to its ability to bypass the Same Origin Policy.
2
How does CVE-2011-4682 affect the Opera browser?
CVE-2011-4682 allows remote attackers to bypass the Same Origin Policy by exploiting improper implementation of the 'in' operator in the JavaScript engine.
3
How do I fix CVE-2011-4682?
To fix CVE-2011-4682, ensure that Opera is updated to version 11.60 or newer.
4
Which versions of Opera are affected by CVE-2011-4682?
CVE-2011-4682 affects multiple versions of Opera browsers prior to 11.60.
5
What are the implications of CVE-2011-4682 for users?
Users of affected versions of Opera may be vulnerable to cross-site scripting attacks due to the vulnerability.