Vulnerability Description
Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript code that overrides methods of unspecified native objects in documents that have different origins.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Opera | Opera Browser | <= 12.10 |
Related Weaknesses (CWE)
References
- http://www.opera.com/docs/changelogs/unified/1210/
- http://www.opera.com/support/kb/view/1032/Vendor Advisory
- http://www.opera.com/docs/changelogs/unified/1210/
- http://www.opera.com/support/kb/view/1032/Vendor Advisory
FAQ
What is CVE-2012-6464?
CVE-2012-6464 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript code that overrides methods of unspecified native o...
How severe is CVE-2012-6464?
CVE-2012-6464 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-6464?
Check the references section above for vendor advisories and patch information. Affected products include: Opera Opera Browser.