CVE-2012-4142: XSS
First published: Mon Aug 06 2012(Updated: )
Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, ignores some characters in HTML documents in unspecified circumstances, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Opera | <=12.00 | |
| Opera | =12.00-beta | |
| Linux kernel | ||
| Microsoft Windows | ||
| Opera | <=11.65 | |
| Opera | =10.00 | |
| Opera | =10.00-beta1 | |
| Opera | =10.00-beta2 | |
| Opera | =10.00-beta3 | |
| Opera | =10.01 | |
| Opera | =10.10 | |
| Opera | =10.10-beta1 | |
| Opera | =10.11 | |
| Opera | =10.50 | |
| Opera | =10.50-beta1 | |
| Opera | =10.50-beta2 | |
| Opera | =10.51 | |
| Opera | =10.52 | |
| Opera | =10.52-beta1 | |
| Opera | =10.52-beta2 | |
| Opera | =10.53 | |
| Opera | =10.53-b | |
| Opera | =10.53-beta1 | |
| Opera | =10.54 | |
| Opera | =10.60 | |
| Opera | =10.60-beta1 | |
| Opera | =10.61 | |
| Opera | =10.62 | |
| Opera | =10.63 | |
| Opera | =11.00 | |
| Opera | =11.00-beta | |
| Opera | =11.01 | |
| Opera | =11.10 | |
| Opera | =11.10-beta | |
| Opera | =11.11 | |
| Opera | =11.50 | |
| Opera | =11.50-beta | |
| Opera | =11.51 | |
| Opera | =11.52 | |
| Opera | =11.52.1100 | |
| Opera | =11.60 | |
| Opera | =11.60-beta | |
| Opera | =11.61 | |
| Opera | =11.62 | |
| Opera | =11.64 | |
| Opera | =12.00 | |
| Apple iOS and macOS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-4142?
CVE-2012-4142 has been classified with a moderate severity level due to its potential to enable cross-site scripting (XSS) attacks.
How do I fix CVE-2012-4142?
To fix CVE-2012-4142, update the Opera browser to version 12.01 or later.
What versions of Opera are affected by CVE-2012-4142?
CVE-2012-4142 affects Opera versions before 12.01 on Windows, UNIX, and Mac OS X, including versions up to 11.65.
What type of vulnerability is CVE-2012-4142?
CVE-2012-4142 is a cross-site scripting (XSS) vulnerability that allows remote attackers to potentially exploit the affected browsers.
Is my system vulnerable if I use an Opera version higher than 12.01?
No, if you are using an Opera version higher than 12.01, your system is not vulnerable to CVE-2012-4142.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/author
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/opera
- canonical/opera
- version/opera/12.00
- version/opera/12.00-beta
- vendor/linux
- canonical/linux kernel
- vendor/microsoft
- canonical/microsoft windows
- version/opera/11.65
- version/opera/10.00
- version/opera/10.00-beta1
- version/opera/10.00-beta2
- version/opera/10.00-beta3
- version/opera/10.01
- version/opera/10.10
- version/opera/10.10-beta1
- version/opera/10.11
- version/opera/10.50
- version/opera/10.50-beta1
- version/opera/10.50-beta2
- version/opera/10.51
- version/opera/10.52
- version/opera/10.52-beta1
- version/opera/10.52-beta2
- version/opera/10.53
- version/opera/10.53-b
- version/opera/10.53-beta1
- version/opera/10.54
- version/opera/10.60
- version/opera/10.60-beta1
- version/opera/10.61
- version/opera/10.62
- version/opera/10.63
- version/opera/11.00
- version/opera/11.00-beta
- version/opera/11.01
- version/opera/11.10
- version/opera/11.10-beta
- version/opera/11.11
- version/opera/11.50
- version/opera/11.50-beta
- version/opera/11.51
- version/opera/11.52
- version/opera/11.52.1100
- version/opera/11.60
- version/opera/11.60-beta
- version/opera/11.61
- version/opera/11.62
- version/opera/11.64
- vendor/apple
- canonical/apple ios and macos