VulnerabilityModified
CVE-2010-4582
Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
MEDIUM 5.0EPSS 2.31%
Does this matter?
Lower severity and a low EPSS score (2.31%). Track it; it rarely justifies an emergency change on its own.
Description
Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 2.31% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- opera/opera browser
- Source
- cve@mitre.org
References
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
- http://secunia.com/advisories/42653
- http://www.opera.com/docs/changelogs/mac/1100/
- http://www.opera.com/docs/changelogs/unix/1100/
- http://www.opera.com/docs/changelogs/windows/1100/
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
- http://secunia.com/advisories/42653
- http://www.opera.com/docs/changelogs/mac/1100/
- http://www.opera.com/docs/changelogs/unix/1100/
- http://www.opera.com/docs/changelogs/windows/1100/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.