VulnerabilityModified
CVE-2009-3049
Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode.
MEDIUM 5.0EPSS 2.22%
Does this matter?
Lower severity and a low EPSS score (2.22%). Track it; it rarely justifies an emergency change on its own.
Description
Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 2.22% probability · 82th percentile
- CISA KEV
- Not listed
- Affected
- opera/opera browser
- Source
- cve@mitre.org
References
- http://www.opera.com/docs/changelogs/freebsd/1000/
- http://www.opera.com/docs/changelogs/linux/1000/
- http://www.opera.com/docs/changelogs/mac/1000/
- http://www.opera.com/docs/changelogs/solaris/1000/
- http://www.opera.com/docs/changelogs/windows/1000/
- http://www.opera.com/support/kb/view/932/Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6235
- http://www.opera.com/docs/changelogs/freebsd/1000/
- http://www.opera.com/docs/changelogs/linux/1000/
- http://www.opera.com/docs/changelogs/mac/1000/
- http://www.opera.com/docs/changelogs/solaris/1000/
- http://www.opera.com/docs/changelogs/windows/1000/
- http://www.opera.com/support/kb/view/932/Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6235
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.