Description
Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
References
- http://www.opera.com/docs/changelogs/mac/963/
- http://www.opera.com/docs/changelogs/windows/963/
- http://www.opera.com/docs/changelogs/unix/963/
- JVN#39707339 third-party-advisory
- JVNDB-2012-000049 third-party-advisory