PT-2011-2353 · Opera · Opera

Makoto Shiotsuki · Published 2011-01-31 · Updated 2017-09-19 · CVE-2011-0450

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.01

Description The issue is related to the downloads manager in Opera, which does not properly determine the pathname of the filesystem-viewing application. This allows remote attackers to execute arbitrary code via a crafted web site that hosts an executable file, but it requires user assistance.

Recommendations For Opera versions prior to 11.01, update to version 11.01 or later to resolve the issue.

Fix

Related Identifiers

CVE-2011-0450

Affected Products

Opera

References · 9

• http://secunia.com/advisories/43023 · Vendor Advisory
• http://opera.com/support/kb/view/985 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0231 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0450 · Security Note
• http://jvn.jp/en/jp/JVN33880169/index.html · Note
• http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000010.html · Note
• http://opera.com/docs/changelogs/windows/1101 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12369 · Note
• http://osvdb.org/70726 · Note