CVE-2012-3555

Summary

Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site, related to a "hidden keyboard navigation" issue.

Impact & exploitability

AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

• NVD record
• http://www.opera.com/support/kb/view/1021/Advisory
• http://www.opera.com/docs/changelogs/mac/1165/
• http://www.opera.com/docs/changelogs/mac/1200/
• http://www.opera.com/docs/changelogs/unix/1200/
• http://www.opera.com/docs/changelogs/windows/1200/