peter bassill · operator
$ cve CVE-2012-6470 JSON

CVE-2012-6470 EXPLOIT

9.3
HIGH · CVSS 2.0 · EPSS 7.8% (pctl 94)

Patch early

A public exploit exists.

Description

Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a malformed image.

Scoring

CVSS9.3 (HIGH, v2.0)
VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS7.79% — more likely to be exploited than 94% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2013-01-02
Last modified2026-06-16

Affected (1)

VendorProduct
operaopera browser

Public exploits

SourceTitleDate
exploit-dbOpera Web Browser 12.11 - Crash (PoC)2012-12-03

References

→ the Explorer  ·  watch your stack  ·  NVD