Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.
CVSS Vector
AV:N/AC:M/Au:N/C:C/I:C/A:COpera Browser
APPOpera12.0012.0112.0212.1012.11≤ 12.12
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCE
CWE
Related vulnerabilities
CVE-2018-18913HIGH7.8ten sam produkt
Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a Z...
CVE-2015-8960HIGH8.1ten sam produkt
The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh...
CVE-2013-3211HIGH10.0ten sam produkt
Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to a "moderatel...
CVE-2013-1637HIGH9.3ten sam produkt
Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events.
CVE-2013-1489HIGH10.0ten sam produkt
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Up...