CVE-2012-3558

LowCVSS 2.6/10Last modified Jun 16, 2026

Description

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects.

Metrics

CVSS 2.0 2.6/10AV:N/AC:H/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Jun 14, 2012
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-355910.0Unspecified vulnerability in Opera before 12.00 on Mac OS X has unknown impact and attack vectors, related to a "moderate severity issue."CVE-2012-35604.3Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it eaCVE-2012-356110.0Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a denCVE-2012-35624.3Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page that iCVE-2012-35635.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via a web page that contains invalid characCVE-2012-35645.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application hang) via an absolutely positioned wrap=off TEXTARCVE-2012-35655.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted characters in domain names, as CVE-2012-35664.3Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service (application hang) via JavaScript code that changCVE-2012-35675.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (memory consumption or application hang) via an IFRAME element CVE-2012-35685.0Opera before 12.00 Beta allows remote attackers to cause a denial of service (application crash) via crafted WebGL content, as demonstrated CVE-2012-35699.3Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.CVE-2012-35705.7Buffer overflow in ISC DHCP 4.2.x before 4.2.4-P1, when DHCPv6 mode is enabled, allows remote attackers to cause a denial of service (segmen
CVE-2012-3558: Low severity, CVSS 2.6 | Vulnix