PT-2013-1956

CVE-2012-6466

·

Published

2013-01-02

·

Updated

2013-01-02

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.10
Description The issue arises from improper handling of incorrect size data in a WebP image, allowing remote attackers to obtain potentially sensitive information from process memory. This can be achieved by using a crafted image as the fill pattern for a canvas.
Recommendations For versions prior to 12.10, update to version 12.10 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾