Unscored severity · published Dec 26, 2012
CVE-2012-5180
The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive…
–
CVSS
0.9%
EPSS
No
On KEV
Description
The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OM
Opera Mini · Opera
through 7.4 · source: NVD
OM
Opera Mobile · Opera
through 12.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5180
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5180
jvn.jp
http://jvn.jp/en/jp/JVN27691264/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000112
More from Opera Mini
6.5
CVE-2018-16135
The Opera Mini application 47.1.2249.129326 for Android allows remote attackers to spoof the Location Permission dialog via a crafted web site
6.1
CVE-2016-4075
Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL
5.3
CVE-2021-23253
Opera Mini for Android below 53.1 displays URL left-aligned in the address field