PT-2011-3975 · Opera · Opera

Published 2011-07-01 · Updated 2011-07-08 · CVE-2011-2626

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.50

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by using injected script to set the SRC attribute of an IFRAME element.

Recommendations For Opera versions prior to 11.50, update to version 11.50 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-2626

Affected Products

Opera

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-2626 · Security Note
• http://opera.com/docs/changelogs/unix/1150 · Note
• http://opera.com/docs/changelogs/windows/1150 · Note
• http://opera.com/docs/changelogs/mac/1150 · Note