PT-2011-2353 · Opera · Opera

Makoto Shiotsuki · Publicado 2011-01-31 · Atualizado 2017-09-19 · CVE-2011-0450

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.01

Description The issue is related to the downloads manager in Opera, which does not properly determine the pathname of the filesystem-viewing application. This allows remote attackers to execute arbitrary code via a crafted web site that hosts an executable file, but it requires user assistance.

Recommendations For Opera versions prior to 11.01, update to version 11.01 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2011-0450

Produtos afetados

Opera

Referências · 9

• http://jvn.jp/en/jp/JVN33880169/index.html · Nota
• http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000010.html · Nota
• http://secunia.com/advisories/43023 · Aviso do Fabricante
• http://opera.com/docs/changelogs/windows/1101 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12369 · Nota
• http://osvdb.org/70726 · Nota
• http://opera.com/support/kb/view/985 · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0231 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0450 · Nota de Segurança