CVE-2013-1638

Opera Browser < 12.12 - Code Injection

Title source: rule

Description

Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Cons0ul · doswindows

https://www.exploit-db.com/exploits/24448

View Code ZIP pw:eip

References (3)

[Mailing List] http://lists.opensuse.org/opensuse-updates/2013-02/msg00038.html

[Vendor Advisory] http://www.opera.com/docs/changelogs/unified/1213/

[Vendor Advisory] http://www.opera.com/support/kb/view/1043/

Scores

EPSS 0.2542

EPSS Percentile 96.1%

Classification

CWE

CWE-94

Status draft

Affected Products (8)

opera/opera_browser < 12.12

opera/opera_browser

opera/opera_browser

opera/opera_browser

opera/opera_browser

opera/opera_browser

opera/opera_browser

opera/opera_browser

Timeline

Published Feb 08, 2013

Tracked Since Feb 18, 2026