{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Opera 11.x versions ant\u00e9rieures \u00e0 11.66.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Opera",
          "scada": false
        }
      }
    },
    {
      "description": "Opera 12.x versions ant\u00e9rieures \u00e0 12.01 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Opera",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "links": [],
  "reference": "CERTA-2012-AVI-420",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2012-08-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Trois vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans Opera. Deux vuln\u00e9rabilit\u00e9s\npeuvent \u00eatre utilis\u00e9s pour faciliter l\u0027injection de code indirecte \u00e0\ndistance (XSS). La derni\u00e8re peut \u00eatre utilis\u00e9e pour contourner la\npolitique de s\u00e9curit\u00e9 en permettant le t\u00e9l\u00e9chargement et l\u0027ex\u00e9cution\nd\u0027un fichier \u00e0 l\u0027insu de l\u0027utilisateur.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans Opera",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Opera 1025, 1026 et 1027",
      "url": "http://www.opera.com/support/kb/view/1027/"
    }
  ]
}