CVE-2012-1926 in Web Browser
Summary
Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to unintended read access to history.state information.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
03/27/2012
Disclosure
03/27/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 4968 | Opera Web Browser history.pushState/history.replaceState information disclosure | 200 | Unproven | Official fix | CVE-2012-1926 |