CVE-2012-6472 in Web Browser
Summary
by MITRE
Opera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local users to obtain sensitive information by reading a (1) cache file, (2) password file, or (3) configuration file, or (4) possibly gain privileges by modifying or overwriting a configuration file.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 12/21/2021
The vulnerability described in CVE-2012-6472 represents a critical privilege escalation and information disclosure weakness in Opera web browsers version 12.11 and earlier on unix operating systems. This issue stems from improper file system permissions assigned to the browser's profile directory, creating a fundamental security flaw that adversaries can exploit to access sensitive user data and potentially elevate their system privileges. The vulnerability specifically affects the unix implementation of Opera, making it distinct from other operating system variants where similar issues might not manifest.
The technical flaw manifests through weak directory permissions that allow unauthorized local users to access critical browser components. When Opera creates its profile directory structure, it fails to properly secure the permissions, enabling other local users to read cache files that may contain browsing history, temporary data, and potentially sensitive information. Additionally, password files within the profile directory remain accessible to unauthorized users, allowing attackers to extract stored login credentials for various websites. Configuration files also suffer from these weak permissions, creating opportunities for privilege escalation through modification of browser settings or injection of malicious configurations.
The operational impact of this vulnerability extends beyond simple information disclosure to include potential privilege escalation scenarios. An attacker with local access can read cache files that might contain session information, cookies, or other sensitive data that could be used for further attacks. Password files represent a direct threat to user account security, as they could contain stored credentials for online services. The ability to modify configuration files creates a pathway for attackers to inject malicious code or alter browser behavior, potentially leading to complete system compromise. This vulnerability directly relates to CWE-732, which addresses improper permission assignment, and aligns with ATT&CK technique T1068, which covers privilege escalation through local exploitation of software vulnerabilities.
The security implications of this vulnerability are particularly severe in multi-user environments where multiple users share the same system. Local users can exploit this weakness without requiring network access or complex attack vectors, making it an attractive target for malicious actors. The weak permissions persist across multiple file types within the profile directory, creating multiple attack surfaces for exploitation. Organizations running affected versions of Opera should immediately implement mitigations to prevent unauthorized access to browser profiles, as the vulnerability can be exploited by any local user with minimal technical expertise.
Mitigation strategies should focus on proper permission configuration for the Opera profile directory and its contents. System administrators should ensure that profile directories are created with restrictive permissions that prevent unauthorized access from other local users. The recommended approach includes implementing proper access controls using standard unix permission models, where only the intended user account has read/write access to the profile directory. Additionally, regular security audits should verify that profile directory permissions remain properly configured, and automated monitoring systems can help detect unauthorized access attempts. Updates to Opera version 12.12 or later should be implemented immediately to address the root cause of the vulnerability, as newer versions include proper permission handling for profile directories. Organizations should also consider implementing additional security measures such as file integrity monitoring and user access controls to further protect against similar vulnerabilities in other applications.