VulnerabilityModified
CVE-2010-2659
Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties accessible to third-party domains, which allows remote attackers to obtain potentially sensitive information via a crafted web site.
MEDIUM 4.3EPSS 1.54%
Does this matter?
Lower severity and a low EPSS score (1.54%). Track it; it rarely justifies an emergency change on its own.
Description
Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties accessible to third-party domains, which allows remote attackers to obtain potentially sensitive information via a crafted web site.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
- EPSS
- 1.54% probability · 74th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- opera/opera browser
- Source
- cve@mitre.org
References
- http://www.opera.com/docs/changelogs/mac/1052/
- http://www.opera.com/docs/changelogs/unix/1060/
- http://www.opera.com/docs/changelogs/windows/1050/
- http://www.opera.com/support/search/view/959/Vendor Advisory
- http://www.vupen.com/english/advisories/2010/1673Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11096
- http://www.opera.com/docs/changelogs/mac/1052/
- http://www.opera.com/docs/changelogs/unix/1060/
- http://www.opera.com/docs/changelogs/windows/1050/
- http://www.opera.com/support/search/view/959/Vendor Advisory
- http://www.vupen.com/english/advisories/2010/1673Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11096
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.