CVE-2010-4045 Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site script...
HighCVSS 9.3
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site scripting (XSS) attacks, and possibly execute arbitrary code by leveraging the ability of a script to interact with a web page from (1) a different domain or (2) a different security context.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opera browser | <= 10.62 | No fix listed |
| opera browser | = 5.0 | No fix listed |
| opera browser | = 5.0-beta2 | No fix listed |
| opera browser | = 5.0-beta3 | No fix listed |
| opera browser | = 5.0-beta4 | No fix listed |
| opera browser | = 5.0-beta5 | No fix listed |
| opera browser | = 5.0-beta6 | No fix listed |
| opera browser | = 5.0-beta7 | No fix listed |
| opera browser | = 5.0-beta8 | No fix listed |
| opera browser | = 5.02 | No fix listed |
| opera browser | = 5.10 | No fix listed |
| opera browser | = 5.11 | No fix listed |
| opera browser | = 5.12 | No fix listed |
| opera browser | = 6.0 | No fix listed |
| opera browser | = 6.0-beta1 | No fix listed |
| opera browser | = 6.0-beta2 | No fix listed |
| opera browser | = 6.0-tp1 | No fix listed |
| opera browser | = 6.0-tp2 | No fix listed |
| opera browser | = 6.0-tp3 | No fix listed |
| opera browser | = 6.1 | No fix listed |
| opera browser | = 6.01 | No fix listed |
| opera browser | = 6.1-beta1 | No fix listed |
| opera browser | = 6.02 | No fix listed |
| opera browser | = 6.03 | No fix listed |
| opera browser | = 6.04 | No fix listed |
Show 85 more
| Product | Affected versions | Fixed in |
|---|---|---|
| opera browser | = 6.05 | No fix listed |
| opera browser | = 6.06 | No fix listed |
| opera browser | = 6.11 | No fix listed |
| opera browser | = 6.12 | No fix listed |
| opera browser | = 7.0 | No fix listed |
| opera browser | = 7.0-beta1 | No fix listed |
| opera browser | = 7.0-beta1_v2 | No fix listed |
| opera browser | = 7.0-beta2 | No fix listed |
| opera browser | = 7.01 | No fix listed |
| opera browser | = 7.02 | No fix listed |
| opera browser | = 7.03 | No fix listed |
| opera browser | = 7.10 | No fix listed |
| opera browser | = 7.10-beta1 | No fix listed |
| opera browser | = 7.11 | No fix listed |
| opera browser | = 7.11-beta2 | No fix listed |
| opera browser | = 7.20 | No fix listed |
| opera browser | = 7.20-beta7 | No fix listed |
| opera browser | = 7.21 | No fix listed |
| opera browser | = 7.22 | No fix listed |
| opera browser | = 7.23 | No fix listed |
| opera browser | = 7.50 | No fix listed |
| opera browser | = 7.50-beta1 | No fix listed |
| opera browser | = 7.51 | No fix listed |
| opera browser | = 7.52 | No fix listed |
| opera browser | = 7.53 | No fix listed |
| opera browser | = 7.54 | No fix listed |
| opera browser | = 7.54-update1 | No fix listed |
| opera browser | = 7.54-update2 | No fix listed |
| opera browser | = 7.60 | No fix listed |
| opera browser | = 8.0 | No fix listed |
| opera browser | = 8.0-beta1 | No fix listed |
| opera browser | = 8.0-beta2 | No fix listed |
| opera browser | = 8.0-beta3 | No fix listed |
| opera browser | = 8.01 | No fix listed |
| opera browser | = 8.02 | No fix listed |
| opera browser | = 8.50 | No fix listed |
| opera browser | = 8.51 | No fix listed |
| opera browser | = 8.52 | No fix listed |
| opera browser | = 8.53 | No fix listed |
| opera browser | = 8.54 | No fix listed |
| opera browser | = 9.0 | No fix listed |
| opera browser | = 9.0-beta1 | No fix listed |
| opera browser | = 9.0-beta2 | No fix listed |
| opera browser | = 9.01 | No fix listed |
| opera browser | = 9.02 | No fix listed |
| opera browser | = 9.10 | No fix listed |
| opera browser | = 9.12 | No fix listed |
| opera browser | = 9.20 | No fix listed |
| opera browser | = 9.20-beta1 | No fix listed |
| opera browser | = 9.21 | No fix listed |
| opera browser | = 9.22 | No fix listed |
| opera browser | = 9.23 | No fix listed |
| opera browser | = 9.24 | No fix listed |
| opera browser | = 9.25 | No fix listed |
| opera browser | = 9.26 | No fix listed |
| opera browser | = 9.27 | No fix listed |
| opera browser | = 9.50 | No fix listed |
| opera browser | = 9.50-beta1 | No fix listed |
| opera browser | = 9.50-beta2 | No fix listed |
| opera browser | = 9.51 | No fix listed |
| opera browser | = 9.52 | No fix listed |
| opera browser | = 9.60 | No fix listed |
| opera browser | = 9.60-beta1 | No fix listed |
| opera browser | = 9.61 | No fix listed |
| opera browser | = 9.62 | No fix listed |
| opera browser | = 9.63 | No fix listed |
| opera browser | = 9.64 | No fix listed |
| opera browser | = 10.00 | No fix listed |
| opera browser | = 10.00-beta1 | No fix listed |
| opera browser | = 10.00-beta2 | No fix listed |
| opera browser | = 10.00-beta3 | No fix listed |
| opera browser | = 10.01 | No fix listed |
| opera browser | = 10.10 | No fix listed |
| opera browser | = 10.10-beta1 | No fix listed |
| opera browser | = 10.50 | No fix listed |
| opera browser | = 10.50-beta1 | No fix listed |
| opera browser | = 10.50-beta2 | No fix listed |
| opera browser | = 10.51 | No fix listed |
| opera browser | = 10.52 | No fix listed |
| opera browser | = 10.53 | No fix listed |
| opera browser | = 10.53-b | No fix listed |
| opera browser | = 10.54 | No fix listed |
| opera browser | = 10.60 | No fix listed |
| opera browser | = 10.60-beta1 | No fix listed |
| opera browser | = 10.61 | No fix listed |
References
- 41740 third-party-advisory vendor-advisory
- 1024570 vdb-entry
- www.opera.com
- www.opera.com
- www.opera.com
- www.opera.com vendor-advisory
- oval:org.mitre.oval:def:12071 signature vdb-entry