CVE-2012-6466

Opera < 12.10 - Information Disclosure via WebP Image Fill Pattern

Title source: llm

Description

Opera before 12.10 does not properly handle incorrect size data in a WebP image, which allows remote attackers to obtain potentially sensitive information from process memory by using a crafted image as the fill pattern for a canvas.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://www.opera.com/support/kb/view/1035/

Vendor Advisory x_refsource_confirm

http://www.opera.com/docs/changelogs/unified/1210/

Scores

EPSS 0.0023

EPSS Percentile 45.7%

Details

CWE

CWE-200

Status published

Products (26)

opera/opera_browser 1.00

opera/opera_browser 2.00

opera/opera_browser 2.10 (4 CPE variants)

opera/opera_browser 2.12

opera/opera_browser 3.00 (2 CPE variants)

opera/opera_browser 3.10

opera/opera_browser 3.21

opera/opera_browser 3.50

opera/opera_browser 3.51

opera/opera_browser 3.60

... and 16 more

Published Jan 02, 2013

Tracked Since Feb 18, 2026