CVE-2012-3556

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jun 14, 2012
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-35575.0Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of CVE-2012-35582.6Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this fieldCVE-2012-355910.0Unspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors, related to a "moderate severity issue."CVE-2012-35604.3Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it eaCVE-2012-356110.0Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a denCVE-2012-35624.3Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page that iCVE-2012-35635.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via a web page that contains invalid characCVE-2012-35645.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application hang) via an absolutely positioned wrap=off TEXTARCVE-2012-35655.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted characters in domain names, as CVE-2012-35664.3Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application hang) via JavaScript code that changCVE-2012-35675.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (memory consumption or application hang) via an IFRAME element CVE-2012-35685.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted WebGL content, as demonstrated