CVE-2012-6461

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-01-02 · updated 2026-06-16
Weakness: CWE-20

Description

The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers to trigger a false indication of successful revocation-status checking by causing a failure of a single checking service.

Affected products

Opera Browser: through 12.10; 1.00, 2.00, 2.10, 2.10-beta1, 2.10-beta2, 2.10-beta3 (+160)

References

http://www.opera.com/docs/changelogs/unified/1210/
http://www.opera.com/support/kb/view/1029/
http://www.opera.com/docs/changelogs/unified/1210/
http://www.opera.com/support/kb/view/1029/

Get alerted when CVE-2012-6461 or the next vulnerability affects your stack