PT-2009-6057 · Opera · Opera

Publicado 2009-10-30 · Atualizado 2022-03-01 · CVE-2009-3832

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Opera versions prior to 10.01

Description The issue allows remote attackers to spoof the address field via a crafted web site, as Opera before version 10.01 on Windows does not prevent the use of Web fonts in rendering the product's own user interface.

Recommendations For Opera versions prior to 10.01, update to version 10.01 or later to resolve the issue.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2009-3832

Produtos afetados

Opera

Referências · 10

• http://vupen.com/english/advisories/2009/3073 · Aviso do Fabricante
• http://xforce.iss.net/xforce/xfdb/54022 · Nota
• http://osvdb.org/59359 · Nota
• http://secunia.com/advisories/37182 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54022 · Nota
• http://opera.com/support/kb/view/940 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-3832 · Nota de Segurança
• http://opera.com/docs/changelogs/windows/1001 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6384 · Nota
• http://securityfocus.com/bid/36850 · Correção