Lucene search

K
cve[email protected]CVE-2009-3047
HistorySep 02, 2009 - 5:30 p.m.

CVE-2009-3047

2009-09-0217:30:01
web.nvd.nist.gov
28
opera
cve-2009-3047
address bar
spoofing
vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.4%

Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited site, which might allow remote attackers to spoof URLs.

Affected configurations

NVD
Node
operaopera_browserRange10.00beta_3
OR
operaopera_browserMatch7.0
OR
operaopera_browserMatch7.23
OR
operaopera_browserMatch7.53
OR
operaopera_browserMatch7.54
OR
operaopera_browserMatch7.60
OR
operaopera_browserMatch8.0
OR
operaopera_browserMatch8.01
OR
operaopera_browserMatch8.02
OR
operaopera_browserMatch8.50
OR
operaopera_browserMatch8.51
OR
operaopera_browserMatch8.52
OR
operaopera_browserMatch8.53
OR
operaopera_browserMatch8.54
OR
operaopera_browserMatch9.0
OR
operaopera_browserMatch9.01
OR
operaopera_browserMatch9.02
OR
operaopera_browserMatch9.10
OR
operaopera_browserMatch9.12
OR
operaopera_browserMatch9.20
OR
operaopera_browserMatch9.21
OR
operaopera_browserMatch9.22
OR
operaopera_browserMatch9.51
OR
operaopera_browserMatch9.52
OR
operaopera_browserMatch9.64

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.3 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.4%