Read the docs
TI-2012-03534 Aliases CVE-2012-4143GHSA-f5qr-vmvh-c85p

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS…

Priority LOW 33CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-94.

Summary

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog, a different vulnerability than CVE-2012-1924.

Why it matters now

EPSS 0.01309 70th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 47

CPEVersionsRoleVendor
cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*up to 12.00VulnerableOpera
cpe:2.3:a:opera:opera_browser:12.00:beta:*:*:*:*:*:*12.00 betaVulnerableOpera
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*all versionsRunning onLinux
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*up to 11.65VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.00:*:*:*:*:*:*:*10.00VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.00:beta1:*:*:*:*:*:*10.00 beta1VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.00:beta2:*:*:*:*:*:*10.00 beta2VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.00:beta3:*:*:*:*:*:*10.00 beta3VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.01:*:*:*:*:*:*:*10.01VulnerableOpera
  • cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:* Versions up to 12.00 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:12.00:beta:*:*:*:*:*:* Versions 12.00 beta Vulnerable ·Opera
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions all versions Running on ·Linux
  • cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:* Versions up to 11.65 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.00:*:*:*:*:*:*:* Versions 10.00 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.00:beta1:*:*:*:*:*:* Versions 10.00 beta1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.00:beta2:*:*:*:*:*:* Versions 10.00 beta2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.00:beta3:*:*:*:*:*:* Versions 10.00 beta3 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.01:*:*:*:*:*:*:* Versions 10.01 Vulnerable ·Opera
Show 37 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:opera:opera_browser:10.10:*:*:*:*:*:*:*10.10VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.10:beta1:*:*:*:*:*:*10.10 beta1VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.11:*:*:*:*:*:*:*10.11VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.50:*:*:*:*:*:*:*10.50VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.50:beta1:*:*:*:*:*:*10.50 beta1VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.50:beta2:*:*:*:*:*:*10.50 beta2VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.51:*:*:*:*:*:*:*10.51VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.52:*:*:*:*:*:*:*10.52VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.52:beta1:*:*:*:*:*:*10.52 beta1VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.52:beta2:*:*:*:*:*:*10.52 beta2VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.53:*:*:*:*:*:*:*10.53VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.53:b:*:*:*:*:*:*10.53 bVulnerableOpera
cpe:2.3:a:opera:opera_browser:10.53:beta1:*:*:*:*:*:*10.53 beta1VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.54:*:*:*:*:*:*:*10.54VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.60:*:*:*:*:*:*:*10.60VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.60:beta1:*:*:*:*:*:*10.60 beta1VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.61:*:*:*:*:*:*:*10.61VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.62:*:*:*:*:*:*:*10.62VulnerableOpera
cpe:2.3:a:opera:opera_browser:10.63:*:*:*:*:*:*:*10.63VulnerableOpera
cpe:2.3:a:opera:opera_browser:11.00:*:*:*:*:*:*:*11.00VulnerableOpera
cpe:2.3:a:opera:opera_browser:11.00:beta:*:*:*:*:*:*11.00 betaVulnerableOpera
cpe:2.3:a:opera:opera_browser:11.01:*:*:*:*:*:*:*11.01VulnerableOpera
cpe:2.3:a:opera:opera_browser:11.10:*:*:*:*:*:*:*11.10VulnerableOpera
cpe:2.3:a:opera:opera_browser:11.10:beta:*:*:*:*:*:*11.10 betaVulnerableOpera
cpe:2.3:a:opera:opera_browser:11.11:*:*:*:*:*:*:*11.11VulnerableOpera
cpe:2.3:a:opera:opera_browser:11.50:*:*:*:*:*:*:*11.50VulnerableOpera
cpe:2.3:a:opera:opera_browser:11.50:beta:*:*:*:*:*:*11.50 betaVulnerableOpera
cpe:2.3:a:opera:opera_browser:11.51:*:*:*:*:*:*:*11.51VulnerableOpera
cpe:2.3:a:opera:opera_browser:11.52:*:*:*:*:*:*:*11.52VulnerableOpera
cpe:2.3:a:opera:opera_browser:11.52.1100:*:*:*:*:*:*:*11.52.1100VulnerableOpera
cpe:2.3:a:opera:opera_browser:11.60:*:*:*:*:*:*:*11.60VulnerableOpera
cpe:2.3:a:opera:opera_browser:11.60:beta:*:*:*:*:*:*11.60 betaVulnerableOpera
cpe:2.3:a:opera:opera_browser:11.61:*:*:*:*:*:*:*11.61VulnerableOpera
cpe:2.3:a:opera:opera_browser:11.62:*:*:*:*:*:*:*11.62VulnerableOpera
cpe:2.3:a:opera:opera_browser:11.64:*:*:*:*:*:*:*11.64VulnerableOpera
cpe:2.3:a:opera:opera_browser:12.00:*:*:*:*:*:*:*12.00VulnerableOpera
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*all versionsRunning onApple
  • cpe:2.3:a:opera:opera_browser:10.10:*:*:*:*:*:*:* Versions 10.10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.10:beta1:*:*:*:*:*:* Versions 10.10 beta1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.11:*:*:*:*:*:*:* Versions 10.11 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.50:*:*:*:*:*:*:* Versions 10.50 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.50:beta1:*:*:*:*:*:* Versions 10.50 beta1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.50:beta2:*:*:*:*:*:* Versions 10.50 beta2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.51:*:*:*:*:*:*:* Versions 10.51 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.52:*:*:*:*:*:*:* Versions 10.52 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.52:beta1:*:*:*:*:*:* Versions 10.52 beta1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.52:beta2:*:*:*:*:*:* Versions 10.52 beta2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.53:*:*:*:*:*:*:* Versions 10.53 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.53:b:*:*:*:*:*:* Versions 10.53 b Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.53:beta1:*:*:*:*:*:* Versions 10.53 beta1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.54:*:*:*:*:*:*:* Versions 10.54 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.60:*:*:*:*:*:*:* Versions 10.60 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.60:beta1:*:*:*:*:*:* Versions 10.60 beta1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.61:*:*:*:*:*:*:* Versions 10.61 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.62:*:*:*:*:*:*:* Versions 10.62 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:10.63:*:*:*:*:*:*:* Versions 10.63 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.00:*:*:*:*:*:*:* Versions 11.00 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.00:beta:*:*:*:*:*:* Versions 11.00 beta Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.01:*:*:*:*:*:*:* Versions 11.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.10:*:*:*:*:*:*:* Versions 11.10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.10:beta:*:*:*:*:*:* Versions 11.10 beta Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.11:*:*:*:*:*:*:* Versions 11.11 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.50:*:*:*:*:*:*:* Versions 11.50 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.50:beta:*:*:*:*:*:* Versions 11.50 beta Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.51:*:*:*:*:*:*:* Versions 11.51 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.52:*:*:*:*:*:*:* Versions 11.52 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.52.1100:*:*:*:*:*:*:* Versions 11.52.1100 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.60:*:*:*:*:*:*:* Versions 11.60 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.60:beta:*:*:*:*:*:* Versions 11.60 beta Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.61:*:*:*:*:*:*:* Versions 11.61 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.62:*:*:*:*:*:*:* Versions 11.62 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:11.64:*:*:*:*:*:*:* Versions 11.64 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera_browser:12.00:*:*:*:*:*:*:* Versions 12.00 Vulnerable ·Opera
  • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* Versions all versions Running on ·Apple

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-4143
  2. 2026-10-03 Alias added: GHSA-f5qr-vmvh-c85p

References

Advisory 1

Other 4

  • TI-2015-03381 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server… CVSS 3.1LOW 3.7
  • TI-2010-01304 Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute… CVSS 2.0HIGH 10.0
  • TI-2011-02999 The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft… CVSS 2.0MEDIUM 4.3
  • TI-2011-02290 Opera before 11.11 does not properly implement FRAMESET elements, which allows remote… CVSS 2.0HIGH 10.0
  • TI-2007-05262 Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on… CVSS 2.0HIGH 10.0
  • TI-2007-00121 Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary… CVSS 2.0HIGH 9.3
See all 281 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences