CVE-2002-0270 Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attack...
MediumCVSS 4.3
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opera software opera web browser | = 9.10 | No fix listed |