2013-01-02

CVE-2012-6470 Jan 02, 11:46 CRITICAL POC THREAT Emergency

Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a malformed image. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 31.3%.

CVE-2012-6468 Jan 02, 11:46 CRITICAL Act Now

Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long HTTP response. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

CVE-2012-6465 Jan 02, 11:46 CRITICAL Act Now

Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed SVG image. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.