The version of Opera installed on the remote host is earlier than 12.01 and is, therefore, reportedly affected by multiple issues :

  - An error exists in the handling of certain URLs that     can lead to memory corruption and possible code     execution. (1016)

  - Errors exist in the handling of DOM elements and     certain HTML characters that can lead to cross-site     scripting. (1025, 1026)

  - Download dialog boxes can be made small enough that     users may not realize they are accepting a download     and further, executing such a download. (1027)

  - An attacker could cause an application crash by tricking     a user into connecting to a malicious site, as     demonstrated by the Lenovo 'Shop Now' page.     (CVE-2012-4146)

リモートホストが GLSA-201209-11 で説明されている脆弱性の影響を受けます（Opera：複数の脆弱性）

Opera に複数の脆弱性が発見されました。詳細については、以下で参照されている CVE 識別子および Opera リリースノートを確認してください。
 影響：

リモートの攻撃者がユーザーを誘導し、Opera を使用して特別に細工された web ページを開かせて、プロセスの権限で任意のコードを実行したり、サービス拒否状態にさせたりする恐れがあります。
 また、リモートの攻撃者がユーザーを騙して、ファイルをダウンロードさせて実行させることにより、クロスサイトスクリプティング（XSS）攻撃やアドレスバー偽装を仕掛けたり、その他の詳細不明な影響を与えたりする可能性があります。
 回避策：

現時点で、既知の回避策はありません。

The remote host is affected by the vulnerability described in GLSA-201209-11 (Opera: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Opera. Please review       the CVE identifiers and Opera Release Notes referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted web       page using Opera, possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
      Furthermore, a remote attacker may be able to trick a user into       downloading and executing files, conduct Cross-Site Scripting (XSS)       attacks, spoof the address bar, or have other unspecified impact.
  Workaround :

    There is no known workaround at this time.

远程主机上安装的 Opera 版本低于 12.01，因此据报告受到多种问题的影响：

- 某些 URL 处理中存在错误，可导致内存损坏以及可能的代码执行。(1016)

- DOM 元素和某些 HTML 字符处理中存在错误，可导致跨站脚本。（1025、1026）

- 下载对话框可能非常小，使用户可能意识不到正接受下载，从而执行这种下载。(1027)

- 攻击者可通过诱骗用户连接到恶意站点造成应用程序崩溃，这一点已由 Lenovo “Shop Now”页面证实。(CVE-2012-4146)

远程主机受到 GLSA-201209-11 中所述漏洞的影响（Opera：多个漏洞）

    已在 Opera 中发现多种漏洞。请检查下面提及的 CVE 标识符和 Opera 发行说明以了解详细信息。
  影响：

    远程攻击者可引诱用户使用 Opera 打开特殊构建的网页，这可能导致以进程权限执行任意代码或拒绝服务情况。
      此外，远程攻击者可能可以诱骗用户下载并执行文件、执行跨站脚本 (XSS) 攻击、欺骗地址栏或造成其他不明影响。
  变通方案：

    目前无任何已知的变通方案。

リモートホストにインストールされている Opera のバージョンが 12.01 より前であるため、以下の複数の問題による影響を受けることが報告されています。

  - An error exists in the handling of certain URLs that can lead to memory corruption and possible code execution. (1016)

  - Errors exist in the handling of DOM elements and certain HTML characters that can lead to cross-site scripting. (1025, 1026)

  - Download dialog boxes can be made small enough that users may not realize they are accepting a download and further, executing such a download. (1027)

  - An attacker could cause an application crash by tricking a user into connecting to a malicious site, as demonstrated by the Lenovo 'Shop Now' page. (CVE-2012-4146)

遠端主機受到 GLSA-201209-11 中所述的弱點影響 (Opera：多個弱點)

    在 Opera 中發現多個弱點。如需詳細資訊，請檢閱下方提及的 CVE 識別碼和 Opera Release 版本資訊。
  影響：

    遠端攻擊者可能引誘使用者開啟使用 Opera 的特製網頁，並可能藉此以處理程序的權限來執行任意程式碼，或引發拒絕服務情況。
      此外，遠端攻擊者可能會誘騙使用者下載和執行檔案、執行跨網站指令碼 (XSS) 攻擊、偽造位址列或造成其他不明影響。
  因應措施：

    目前尚無已知的因應措施。

遠端主機上安裝的 Opera 版本比 12.01 舊，因此據報受到多個問題影響：

- 在某些 URL 的處理中存在一個錯誤，此錯誤可導致記憶體損毀，而且可能執行程式碼。(1016)

- 在 DOM 元素和某些 HTML 字元的處理中存在多個錯誤，這些錯誤可導致跨網站指令碼。(1025、1026)

- 下載對話方塊可變成小到使用者可能未意識到他們正在接受下載，並進而執行該下載。(1027)

- 攻擊者可誘騙使用者連線至惡意網站，進而造成應用程式損毀，Lenovo「立即購買」頁面即為一例。(CVE-2012-4146)

The remote host is running the Opera web browser.  

Versions of Opera earlier than 12.01 are potentially affected by multiple vulnerabilities :

  - An error exists in the handling of certain URLs that can lead to memory corruption and possible code execution. (1016)

  - Errors exist in the handling of DOM elements and certain HTML characters that can lead to cross-site scripting. (1025, 1026)

  - Download dialog boxes can be made small enough that users may not realize they are accepting a download and further, executing such a download. (1027)

  - An attacker could cause an application crash by tricking a user into connecting to a malicious site, as demonstrated by the Lenovo 'Shop Now' page. (CVE-2012-4146)

The remote host is running the Opera web browser. 

Versions of Opera earlier than 12.01 are potentially affected by multiple vulnerabilities :

  - An error exists in the handling of certain URLs that can lead to memory corruption and possible code execution. (1016)

  - Errors exist in the handling of DOM elements and certain HTML characters that can lead to cross-site scripting. (1025, 1026)

  - Download dialog boxes can be made small enough that users may not realize they are accepting a download and further, executing such a download. (1027)

  - An attacker could cause an application crash by tricking a user into connecting to a malicious site, as demonstrated by the Lenovo 'Shop Now' page. (CVE-2012-4146)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
61414	Opera < 12.01 Multiple Vulnerabilities	Nessus	Windows	2012/8/3	2019/12/4	critical
62301	GLSA-201209-11：Opera：複数の脆弱性	Nessus	Gentoo Local Security Checks	2012/9/26	2021/1/6	critical
62301	GLSA-201209-11 : Opera: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2012/9/26	2021/1/6	critical
61414	Opera < 12.01 多种漏洞	Nessus	Windows	2012/8/3	2019/12/4	critical
62301	GLSA-201209-11 : Opera：多个漏洞	Nessus	Gentoo Local Security Checks	2012/9/26	2021/1/6	critical
61414	Opera < 12.01 の複数の脆弱性	Nessus	Windows	2012/8/3	2019/12/4	critical
62301	GLSA-201209-11 : Opera：多個弱點	Nessus	Gentoo Local Security Checks	2012/9/26	2021/1/6	critical
61414	Opera < 12.01 多個弱點	Nessus	Windows	2012/8/3	2019/12/4	critical
6551	Opera < 12.01 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2012/8/24	2019/3/6	high
800853	Opera < 12.01 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2012/8/24		high

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

high

high