PT-2010-5260 · Opera · Opera

Publicado 2010-10-21 · Atualizado 2017-09-19 · CVE-2010-4044

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera versions prior to 10.63

Description The issue allows remote attackers to spoof URLs by changing a window's size, as the software does not ensure that the portion of a URL shown in the Address Bar contains the beginning of the URL.

Recommendations For versions prior to 10.63, update to version 10.63 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-4044

Produtos afetados

Opera

Referências · 8

• http://secunia.com/advisories/41740 · Aviso do Fabricante
• http://opera.com/docs/changelogs/mac/1063 · Nota
• http://opera.com/support/kb/view/972 · Aviso do Fabricante
• http://securitytracker.com/id?1024570 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4044 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12135 · Nota
• http://opera.com/docs/changelogs/windows/1063 · Nota
• http://opera.com/docs/changelogs/unix/1063 · Nota