PT-2009-6057 · Opera · Opera

Published 2009-10-30 · Updated 2022-03-01 · CVE-2009-3832

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Opera versions prior to 10.01

Description The issue allows remote attackers to spoof the address field via a crafted web site, as Opera before version 10.01 on Windows does not prevent the use of Web fonts in rendering the product's own user interface.

Recommendations For Opera versions prior to 10.01, update to version 10.01 or later to resolve the issue.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2009-3832

Affected Products

Opera

References · 10

• http://vupen.com/english/advisories/2009/3073 · Vendor Advisory
• http://opera.com/support/kb/view/940 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3832 · Security Note
• http://opera.com/docs/changelogs/windows/1001 · Vendor Advisory
• http://securityfocus.com/bid/36850 · Patch
• http://xforce.iss.net/xforce/xfdb/54022 · Note
• http://osvdb.org/59359 · Note
• http://secunia.com/advisories/37182 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54022 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6384 · Note