PT-2002-1340 · Opera · Opera

Publicado 2002-05-03 · Atualizado 2016-10-18 · CVE-2002-0270

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks. This occurs when Opera is configured with the "Determine action by MIME type" option disabled, causing it to interpret an object as an HTML document even when its MIME Content-Type is text/plain.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2002-0270

Produtos afetados

Opera

Referências · 2

• http://marc.info/?l=bugtraq&m=101363764421623&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0270 · Nota de Segurança