PT-2005-3890 · Opera · Opera

Publicado 2005-09-26 · Atualizado 2022-02-28 · CVE-2005-3059

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Opera versions 8.50

Description The issue is related to two unspecified vulnerabilities in Opera. The first vulnerability involves the handling of the must-revalidate cache directive for HTTPS pages. The second vulnerability is a display issue with cookie comment encoding. The impact and attack vectors of these vulnerabilities are unknown.

Recommendations For Opera version 8.50, consider disabling the handling of the must-revalidate cache directive for HTTPS pages and restricting the display of cookie comments until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-3059

Produtos afetados

Opera

Referências · 7

• http://vupen.com/english/advisories/2005/1789 · Nota
• http://frsirt.com/english/advisories/2005/1789 · Nota
• http://secunia.com/advisories/16645 · Nota
• https://t.me/cvenotify/27466 · Publicação no Telegram
• http://opera.com/docs/changelogs/windows/850 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2005-3059 · Nota de Segurança
• http://opera.com/docs/changelogs/linux/850 · Correção