CVE-2012-1926: Infoleak
Published Mar 28, 2012
·Updated
Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information.
Affected Software
126 affected components
opera Opera Browser<=11.61
opera Opera Browser=5.0
opera Opera Browser=5.0-beta2
opera Opera Browser=5.0-beta3
opera Opera Browser=5.0-beta4
opera Opera Browser=5.0-beta5
opera Opera Browser=5.0-beta6
opera Opera Browser=5.0-beta7
opera Opera Browser=5.0-beta8
opera Opera Browser=5.02
opera Opera Browser=5.10
opera Opera Browser=5.11
opera Opera Browser=5.12
opera Opera Browser=6.0
opera Opera Browser=6.0-beta1
opera Opera Browser=6.0-beta2
opera Opera Browser=6.0-beta3
opera Opera Browser=6.0-tp1
opera Opera Browser=6.0-tp2
opera Opera Browser=6.0-tp3
opera Opera Browser=6.1
opera Opera Browser=6.01
opera Opera Browser=6.1-beta1
opera Opera Browser=6.02
opera Opera Browser=6.03
opera Opera Browser=6.04
opera Opera Browser=6.05
opera Opera Browser=6.06
opera Opera Browser=6.11
opera Opera Browser=6.12
opera Opera Browser=7.0
opera Opera Browser=7.0-beta1
opera Opera Browser=7.0-beta1_v2
opera Opera Browser=7.0-beta2
opera Opera Browser=7.01
opera Opera Browser=7.02
opera Opera Browser=7.03
opera Opera Browser=7.10
opera Opera Browser=7.10-beta1
opera Opera Browser=7.11
opera Opera Browser=7.11-beta2
opera Opera Browser=7.20
opera Opera Browser=7.20-beta7
opera Opera Browser=7.21
opera Opera Browser=7.22
opera Opera Browser=7.23
opera Opera Browser=7.50
opera Opera Browser=7.50-beta1
opera Opera Browser=7.51
opera Opera Browser=7.52
opera Opera Browser=7.53
opera Opera Browser=7.54
opera Opera Browser=7.54-update1
opera Opera Browser=7.54-update2
opera Opera Browser=8.0
opera Opera Browser=8.0-beta1
opera Opera Browser=8.0-beta2
opera Opera Browser=8.0-beta3
opera Opera Browser=8.01
opera Opera Browser=8.02
opera Opera Browser=8.50
opera Opera Browser=8.51
opera Opera Browser=8.52
opera Opera Browser=8.53
opera Opera Browser=8.54
opera Opera Browser=9.0
opera Opera Browser=9.0-beta1
opera Opera Browser=9.0-beta2
opera Opera Browser=9.01
opera Opera Browser=9.02
opera Opera Browser=9.10
opera Opera Browser=9.20
opera Opera Browser=9.20-beta1
opera Opera Browser=9.21
opera Opera Browser=9.22
opera Opera Browser=9.23
opera Opera Browser=9.24
opera Opera Browser=9.25
opera Opera Browser=9.26
opera Opera Browser=9.27
opera Opera Browser=9.50
opera Opera Browser=9.50-beta1
opera Opera Browser=9.50-beta2
opera Opera Browser=9.51
opera Opera Browser=9.52
opera Opera Browser=9.60
opera Opera Browser=9.60-beta1
opera Opera Browser=9.61
opera Opera Browser=9.62
opera Opera Browser=9.63
opera Opera Browser=9.64
opera Opera Browser=10.00
opera Opera Browser=10.00-beta1
opera Opera Browser=10.00-beta2
opera Opera Browser=10.00-beta3
opera Opera Browser=10.01
opera Opera Browser=10.10
opera Opera Browser=10.10-beta1
opera Opera Browser=10.11
opera Opera Browser=10.50
opera Opera Browser=10.50-beta1
opera Opera Browser=10.50-beta2
opera Opera Browser=10.51
opera Opera Browser=10.52
opera Opera Browser=10.52-beta1
opera Opera Browser=10.52-beta2
opera Opera Browser=10.53
opera Opera Browser=10.53-beta1
opera Opera Browser=10.54
opera Opera Browser=10.60
opera Opera Browser=10.60-beta1
opera Opera Browser=10.61
opera Opera Browser=10.62
opera Opera Browser=10.63
opera Opera Browser=11.00
opera Opera Browser=11.00-beta
opera Opera Browser=11.01
opera Opera Browser=11.10
opera Opera Browser=11.10-beta
opera Opera Browser=11.11
opera Opera Browser=11.50
opera Opera Browser=11.50-beta
opera Opera Browser=11.51
opera Opera Browser=11.52
opera Opera Browser=11.60
opera Opera Browser=11.60-beta
Event History
Mar 28, 2012
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1926?
CVE-2012-1926 has been rated as having a medium severity due to the potential for attackers to bypass the Same Origin Policy.
2
How do I fix CVE-2012-1926?
To fix CVE-2012-1926, users should upgrade to Opera version 11.62 or later.
3
What can an attacker do with CVE-2012-1926?
An attacker can exploit CVE-2012-1926 to gain unauthorized access to history.state information through cross-domain frames.
4
Which versions of Opera are affected by CVE-2012-1926?
CVE-2012-1926 affects Opera versions prior to 11.62 and several earlier versions including 5.x, 6.x, 7.x, up to 11.61.
5
Is CVE-2012-1926 exploit mitigated in newer versions?
Yes, CVE-2012-1926 is mitigated in Opera version 11.62 and later, which addresses the vulnerability.