CVE-2012-3557

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of JSON resources and consequently obtain sensitive information via a crafted web site.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published: Jun 14, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-35582.6Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field CVE-2012-355910.0Unspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors, related to a "moderate severity issue."CVE-2012-35604.3Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it ea CVE-2012-356110.0Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a den CVE-2012-35624.3Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page that i CVE-2012-35635.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via a web page that contains invalid charac CVE-2012-35645.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application hang) via an absolutely positioned wrap=off TEXTAR CVE-2012-35655.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted characters in domain names, as CVE-2012-35664.3Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application hang) via JavaScript code that chang CVE-2012-35675.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (memory consumption or application hang) via an IFRAME element CVE-2012-35685.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted WebGL content, as demonstrated CVE-2012-35699.3Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.