CVE-2012-3557: Medium severity web browser for android vulnerability
Published Jun 14, 2012
·Updated
Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site.
Affected Software
127 affected components
opera Opera Browser<=11.62
opera Opera Browser=5.0
opera Opera Browser=5.0-beta2
opera Opera Browser=5.0-beta3
opera Opera Browser=5.0-beta4
opera Opera Browser=5.0-beta5
opera Opera Browser=5.0-beta6
opera Opera Browser=5.0-beta7
opera Opera Browser=5.0-beta8
opera Opera Browser=5.02
opera Opera Browser=5.10
opera Opera Browser=5.11
opera Opera Browser=5.12
opera Opera Browser=6.0
opera Opera Browser=6.0-beta1
opera Opera Browser=6.0-beta2
opera Opera Browser=6.0-beta3
opera Opera Browser=6.0-tp1
opera Opera Browser=6.0-tp2
opera Opera Browser=6.0-tp3
opera Opera Browser=6.1
opera Opera Browser=6.01
opera Opera Browser=6.1-beta1
opera Opera Browser=6.02
opera Opera Browser=6.03
opera Opera Browser=6.04
opera Opera Browser=6.05
opera Opera Browser=6.06
opera Opera Browser=6.11
opera Opera Browser=6.12
opera Opera Browser=7.0
opera Opera Browser=7.0-beta1
opera Opera Browser=7.0-beta1_v2
opera Opera Browser=7.0-beta2
opera Opera Browser=7.01
opera Opera Browser=7.02
opera Opera Browser=7.03
opera Opera Browser=7.10
opera Opera Browser=7.10-beta1
opera Opera Browser=7.11
opera Opera Browser=7.11-beta2
opera Opera Browser=7.20
opera Opera Browser=7.20-beta7
opera Opera Browser=7.21
opera Opera Browser=7.22
opera Opera Browser=7.23
opera Opera Browser=7.50
opera Opera Browser=7.50-beta1
opera Opera Browser=7.51
opera Opera Browser=7.52
opera Opera Browser=7.53
opera Opera Browser=7.54
opera Opera Browser=7.54-update1
opera Opera Browser=7.54-update2
opera Opera Browser=8.0
opera Opera Browser=8.0-beta1
opera Opera Browser=8.0-beta2
opera Opera Browser=8.0-beta3
opera Opera Browser=8.01
opera Opera Browser=8.02
opera Opera Browser=8.50
opera Opera Browser=8.51
opera Opera Browser=8.52
opera Opera Browser=8.53
opera Opera Browser=8.54
opera Opera Browser=9.0
opera Opera Browser=9.0-beta1
opera Opera Browser=9.0-beta2
opera Opera Browser=9.01
opera Opera Browser=9.02
opera Opera Browser=9.10
opera Opera Browser=9.20
opera Opera Browser=9.20-beta1
opera Opera Browser=9.21
opera Opera Browser=9.22
opera Opera Browser=9.23
opera Opera Browser=9.24
opera Opera Browser=9.25
opera Opera Browser=9.26
opera Opera Browser=9.27
opera Opera Browser=9.50
opera Opera Browser=9.50-beta1
opera Opera Browser=9.50-beta2
opera Opera Browser=9.51
opera Opera Browser=9.52
opera Opera Browser=9.60
opera Opera Browser=9.60-beta1
opera Opera Browser=9.61
opera Opera Browser=9.62
opera Opera Browser=9.63
opera Opera Browser=9.64
opera Opera Browser=10.00
opera Opera Browser=10.00-beta1
opera Opera Browser=10.00-beta2
opera Opera Browser=10.00-beta3
opera Opera Browser=10.01
opera Opera Browser=10.10
opera Opera Browser=10.10-beta1
opera Opera Browser=10.11
opera Opera Browser=10.50
opera Opera Browser=10.50-beta1
opera Opera Browser=10.50-beta2
opera Opera Browser=10.51
opera Opera Browser=10.52
opera Opera Browser=10.52-beta1
opera Opera Browser=10.52-beta2
opera Opera Browser=10.53
opera Opera Browser=10.53-beta1
opera Opera Browser=10.54
opera Opera Browser=10.60
opera Opera Browser=10.60-beta1
opera Opera Browser=10.61
opera Opera Browser=10.62
opera Opera Browser=10.63
opera Opera Browser=11.00
opera Opera Browser=11.00-beta
opera Opera Browser=11.01
opera Opera Browser=11.10
opera Opera Browser=11.10-beta
opera Opera Browser=11.11
opera Opera Browser=11.50
opera Opera Browser=11.50-beta
opera Opera Browser=11.51
opera Opera Browser=11.52
opera Opera Browser=11.60
opera Opera Browser=11.60-beta
opera Opera Browser=11.61
Event History
Jun 14, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3557?
CVE-2012-3557 is classified as a high-severity vulnerability due to the potential for sensitive information disclosure through cross-domain loading of JSON resources.
2
How do I fix CVE-2012-3557?
To fix CVE-2012-3557, update your Opera browser to version 11.65 or higher.
3
What versions are affected by CVE-2012-3557?
CVE-2012-3557 affects Opera versions prior to 11.65 and specific older versions down to 5.0.
4
What type of vulnerability is CVE-2012-3557?
CVE-2012-3557 is a cross-domain vulnerability that allows unauthorized reading of JSON strings, leading to information exposure.
5
Can CVE-2012-3557 affect my system if I use a different browser?
No, CVE-2012-3557 specifically affects the Opera browser and does not impact other web browsers.