PT-2005-3890 · Opera · Opera

Published 2005-09-26 · Updated 2022-02-28 · CVE-2005-3059

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Opera versions 8.50

Description The issue is related to two unspecified vulnerabilities in Opera. The first vulnerability involves the handling of the must-revalidate cache directive for HTTPS pages. The second vulnerability is a display issue with cookie comment encoding. The impact and attack vectors of these vulnerabilities are unknown.

Recommendations For Opera version 8.50, consider disabling the handling of the must-revalidate cache directive for HTTPS pages and restricting the display of cookie comments until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-3059

Affected Products

Opera

References · 7

• http://opera.com/docs/changelogs/windows/850 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-3059 · Security Note
• http://opera.com/docs/changelogs/linux/850 · Patch
• http://vupen.com/english/advisories/2005/1789 · Note
• http://frsirt.com/english/advisories/2005/1789 · Note
• http://secunia.com/advisories/16645 · Note
• https://t.me/cvenotify/27466 · Telegram Post