CVE-2014-0815 The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies.
MediumCVSS 4.3
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opera browser | <= 17.00 | No fix listed |
| opera browser | = 1.00 | No fix listed |
| opera browser | = 10.00 | No fix listed |
| opera browser | = 10.00-alpha | No fix listed |
| opera browser | = 10.00-beta1 | No fix listed |
| opera browser | = 10.00-beta2 | No fix listed |
| opera browser | = 10.00-beta3 | No fix listed |
| opera browser | = 10.01 | No fix listed |
| opera browser | = 10.10 | No fix listed |
| opera browser | = 10.10-beta1 | No fix listed |
| opera browser | = 10.11 | No fix listed |
| opera browser | = 10.20-alpha | No fix listed |
| opera browser | = 10.50 | No fix listed |
| opera browser | = 10.50-beta1 | No fix listed |
| opera browser | = 10.50-beta2 | No fix listed |
| opera browser | = 10.51 | No fix listed |
| opera browser | = 10.52 | No fix listed |
| opera browser | = 10.52-beta1 | No fix listed |
| opera browser | = 10.52-beta2 | No fix listed |
| opera browser | = 10.53 | No fix listed |
| opera browser | = 10.53-b | No fix listed |
| opera browser | = 10.53-beta1 | No fix listed |
| opera browser | = 10.54 | No fix listed |
| opera browser | = 10.60 | No fix listed |
| opera browser | = 10.60-alpha | No fix listed |
Show 37 more
| Product | Affected versions | Fixed in |
|---|---|---|
| opera browser | = 10.60-beta1 | No fix listed |
| opera browser | = 10.61 | No fix listed |
| opera browser | = 10.62 | No fix listed |
| opera browser | = 10.63 | No fix listed |
| opera browser | = 11.00 | No fix listed |
| opera browser | = 11.00-beta | No fix listed |
| opera browser | = 11.01 | No fix listed |
| opera browser | = 11.10 | No fix listed |
| opera browser | = 11.10-beta | No fix listed |
| opera browser | = 11.11 | No fix listed |
| opera browser | = 11.50 | No fix listed |
| opera browser | = 11.50-beta | No fix listed |
| opera browser | = 11.51 | No fix listed |
| opera browser | = 11.52 | No fix listed |
| opera browser | = 11.52.1100 | No fix listed |
| opera browser | = 11.60 | No fix listed |
| opera browser | = 11.60-beta | No fix listed |
| opera browser | = 11.61 | No fix listed |
| opera browser | = 11.62 | No fix listed |
| opera browser | = 11.64 | No fix listed |
| opera browser | = 11.65 | No fix listed |
| opera browser | = 11.66 | No fix listed |
| opera browser | = 11.67 | No fix listed |
| opera browser | = 12.00 | No fix listed |
| opera browser | = 12.00-beta | No fix listed |
| opera browser | = 12.01 | No fix listed |
| opera browser | = 12.02 | No fix listed |
| opera browser | = 12.10 | No fix listed |
| opera browser | = 12.10-beta | No fix listed |
| opera browser | = 12.11 | No fix listed |
| opera browser | = 12.12 | No fix listed |
| opera browser | = 12.13 | No fix listed |
| opera browser | = 12.14 | No fix listed |
| opera browser | = 12.15 | No fix listed |
| opera browser | = 15.00 | No fix listed |
| opera browser | = 15.00-next | No fix listed |
| opera browser | = 16.00 | No fix listed |
References
- blogs.opera.com vendor-advisory
- JVN#23256725 third-party-advisory
- JVNDB-2014-000014 third-party-advisory
- 65391 vdb-entry
- opera-android-cve20140815-info-disc(91090) vdb-entry