Opera contains a flaw related to the loading of web pages. The issue is triggered when the currently loaded web page prevents navigation to a new page entered into the URL bar, but still retains that new page's address in the URL bar. This may allow a remote attacker to spoof the contents of the URL bar in very specific scenarios.

Upgrade to version 12.00 or higher (or 11.65 for Mac), as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• CVE ID: 2012-3560 (see also: NVD)
• Secunia Advisory ID: 49533 49803 49818
• Related OSVDB ID: 82951 82952 82954 82955
• Other Advisory URL: http://blog.vulnhunt.com/index.php/2012/06/14/cal-2012-0015-opera-website-spoof/
• Vendor Specific News/Changelog Entry: http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00005.html
  http://lists.opensuse.org/opensuse-updates/2012-07/msg00007.html
  http://www.opera.com/docs/changelogs/mac/1165/
  http://www.opera.com/docs/changelogs/mac/1200/
  http://www.opera.com/docs/changelogs/unix/1200/
  http://www.opera.com/docs/changelogs/windows/1200/
  http://www.opera.com/support/kb/view/1022/
• Packet Storm: http://packetstormsecurity.org/files/113695/Opera-11.61-URL-Spoof.html

• Code Audit Labs - Code Audit Labs