CVE-2013-3210: Infoleak

Published Apr 19, 2013
·
Updated

Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by leveraging control of a different web site in the same top-level domain.

Affected Software

176 affected components
opera Opera Browser<=12.14
opera Opera Browser=3.00
opera Opera Browser=3.00-beta
opera Opera Browser=3.10
opera Opera Browser=3.21
opera Opera Browser=3.50
opera Opera Browser=3.51
opera Opera Browser=3.60
opera Opera Browser=3.61
opera Opera Browser=3.62
opera Opera Browser=3.62-beta
opera Opera Browser=4.00
opera Opera Browser=4.00-beta2
opera Opera Browser=4.00-beta3
opera Opera Browser=4.00-beta4
opera Opera Browser=4.00-beta5
opera Opera Browser=4.00-beta6
opera Opera Browser=4.01
opera Opera Browser=4.02
opera Opera Browser=5.0
opera Opera Browser=5.0-beta2
opera Opera Browser=5.0-beta3
opera Opera Browser=5.0-beta4
opera Opera Browser=5.0-beta5
opera Opera Browser=5.0-beta6
opera Opera Browser=5.0-beta7
opera Opera Browser=5.0-beta8
opera Opera Browser=5.02
opera Opera Browser=5.10
opera Opera Browser=5.11
opera Opera Browser=5.12
opera Opera Browser=6.0
opera Opera Browser=6.0-beta1
opera Opera Browser=6.0-beta2
opera Opera Browser=6.0-beta3
opera Opera Browser=6.0-tp1
opera Opera Browser=6.0-tp2
opera Opera Browser=6.0-tp3
opera Opera Browser=6.1
opera Opera Browser=6.01
opera Opera Browser=6.1-beta1
opera Opera Browser=6.02
opera Opera Browser=6.03
opera Opera Browser=6.04
opera Opera Browser=6.05
opera Opera Browser=6.06
opera Opera Browser=6.11
opera Opera Browser=6.12
opera Opera Browser=7.0
opera Opera Browser=7.0-beta1
opera Opera Browser=7.0-beta1_v2
opera Opera Browser=7.0-beta2
opera Opera Browser=7.01
opera Opera Browser=7.02
opera Opera Browser=7.03
opera Opera Browser=7.10
opera Opera Browser=7.10-beta1
opera Opera Browser=7.11
opera Opera Browser=7.11-beta2
opera Opera Browser=7.20
opera Opera Browser=7.20-beta7
opera Opera Browser=7.21
opera Opera Browser=7.22
opera Opera Browser=7.23
opera Opera Browser=7.50
opera Opera Browser=7.50-beta1
opera Opera Browser=7.51
opera Opera Browser=7.52
opera Opera Browser=7.53
opera Opera Browser=7.54
opera Opera Browser=7.54-update1
opera Opera Browser=7.54-update2
opera Opera Browser=7.60
opera Opera Browser=8.0
opera Opera Browser=8.0-beta1
opera Opera Browser=8.0-beta2
opera Opera Browser=8.0-beta3
opera Opera Browser=8.01
opera Opera Browser=8.02
opera Opera Browser=8.50
opera Opera Browser=8.51
opera Opera Browser=8.52
opera Opera Browser=8.53
opera Opera Browser=8.54
opera Opera Browser=9.0
opera Opera Browser=9.0-beta1
opera Opera Browser=9.0-beta2
opera Opera Browser=9.01
opera Opera Browser=9.02
opera Opera Browser=9.10
opera Opera Browser=9.12
opera Opera Browser=9.20
opera Opera Browser=9.20-beta1
opera Opera Browser=9.21
opera Opera Browser=9.22
opera Opera Browser=9.23
opera Opera Browser=9.24
opera Opera Browser=9.25
opera Opera Browser=9.26
opera Opera Browser=9.27
opera Opera Browser=9.50
opera Opera Browser=9.50-beta1
opera Opera Browser=9.50-beta2
opera Opera Browser=9.51
opera Opera Browser=9.52
opera Opera Browser=9.60
opera Opera Browser=9.60-beta1
opera Opera Browser=9.61
opera Opera Browser=9.62
opera Opera Browser=9.63
opera Opera Browser=9.64
opera Opera Browser=10
opera Opera Browser=10.00
opera Opera Browser=10.00-alpha
opera Opera Browser=10.00-beta_3
opera Opera Browser=10.00-beta1
opera Opera Browser=10.00-beta2
opera Opera Browser=10.00-beta3
opera Opera Browser=10.01
opera Opera Browser=10.10
opera Opera Browser=10.10-beta_1
opera Opera Browser=10.10-beta1
opera Opera Browser=10.11
opera Opera Browser=10.20-alpha
opera Opera Browser=10.50
opera Opera Browser=10.50-beta_1
opera Opera Browser=10.50-beta_2
opera Opera Browser=10.50-beta1
opera Opera Browser=10.50-beta2
opera Opera Browser=10.51
opera Opera Browser=10.52
opera Opera Browser=10.52-beta1
opera Opera Browser=10.52-beta2
opera Opera Browser=10.53
opera Opera Browser=10.53-b
opera Opera Browser=10.53-beta1
opera Opera Browser=10.54
opera Opera Browser=10.60
opera Opera Browser=10.60-alpha
opera Opera Browser=10.60-beta1
opera Opera Browser=10.61
opera Opera Browser=10.62
opera Opera Browser=10.63
opera Opera Browser=11.00
opera Opera Browser=11.00-alpha
opera Opera Browser=11.00-beta
opera Opera Browser=11.00b1
opera Opera Browser=11.01
opera Opera Browser=11.10
opera Opera Browser=11.10-alpha
opera Opera Browser=11.10-beta
opera Opera Browser=11.11
opera Opera Browser=11.50
opera Opera Browser=11.50-alpha
opera Opera Browser=11.50-beta
opera Opera Browser=11.51
opera Opera Browser=11.52
opera Opera Browser=11.52.1100
opera Opera Browser=11.60
opera Opera Browser=11.60-b
opera Opera Browser=11.60-beta
opera Opera Browser=11.61
opera Opera Browser=11.62
opera Opera Browser=11.64
opera Opera Browser=11.65
opera Opera Browser=11.66
opera Opera Browser=11.67
opera Opera Browser=12.00
opera Opera Browser=12.00-beta
opera Opera Browser=12.01
opera Opera Browser=12.02
opera Opera Browser=12.10
opera Opera Browser=12.10-beta
opera Opera Browser=12.11
opera Opera Browser=12.12
opera Opera Browser=12.13

Event History

Apr 19, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2013-3210?

CVE-2013-3210 is considered a medium severity vulnerability as it allows attackers to potentially obtain sensitive information.

2

How do I fix CVE-2013-3210?

To fix CVE-2013-3210, users should upgrade to Opera version 12.15 or later.

3

What versions of Opera are affected by CVE-2013-3210?

CVE-2013-3210 affects all versions of Opera prior to 12.15.

4

Can CVE-2013-3210 lead to data leakage?

Yes, CVE-2013-3210 can lead to data leakage by allowing attackers to access sensitive information via Set-Cookie headers.

5

Is CVE-2013-3210 still a threat in updated browsers?

CVE-2013-3210 is not a threat in updated browsers as the vulnerability was addressed in Opera version 12.15.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203