Lucene search

[email protected]CVE-2010-2666

HistoryJul 08, 2010 - 12:54 p.m.

CVE-2010-2666

2010-07-0812:54:47

CWE-264

[email protected]

web.nvd.nist.gov

cve-2010-2666

opera

windows

mac os x

widget

filesystem

directory selection

remote code execution

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.1 Low

EPSS

Percentile

94.9%

JSON

Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem access and directory selection, which allows user-assisted remote attackers to create or modify arbitrary files, and consequently execute arbitrary code, via widget File I/O operations.

Affected configurations

NVD

Node

operaopera_browserRange≤10.53

operaopera_browserMatch5.0

operaopera_browserMatch5.0beta2

operaopera_browserMatch5.0beta3

operaopera_browserMatch5.0beta4

operaopera_browserMatch5.0beta5

operaopera_browserMatch5.0beta6

operaopera_browserMatch5.0beta7

operaopera_browserMatch5.0beta8

operaopera_browserMatch5.02

operaopera_browserMatch5.10

operaopera_browserMatch5.11

operaopera_browserMatch5.12

operaopera_browserMatch6.0

operaopera_browserMatch6.0beta1

operaopera_browserMatch6.0beta2

operaopera_browserMatch6.0tp1

operaopera_browserMatch6.0tp2

operaopera_browserMatch6.0tp3

operaopera_browserMatch6.01

operaopera_browserMatch6.02

operaopera_browserMatch6.03

operaopera_browserMatch6.04

operaopera_browserMatch6.05

operaopera_browserMatch6.06

operaopera_browserMatch7.0

operaopera_browserMatch7.0beta1

operaopera_browserMatch7.0beta1_v2

operaopera_browserMatch7.0beta2

operaopera_browserMatch7.01

operaopera_browserMatch7.02

operaopera_browserMatch7.03

operaopera_browserMatch7.10

operaopera_browserMatch7.10beta1

operaopera_browserMatch7.11

operaopera_browserMatch7.11beta2

operaopera_browserMatch7.20

operaopera_browserMatch7.20beta7

operaopera_browserMatch7.21

operaopera_browserMatch7.22

operaopera_browserMatch7.23

operaopera_browserMatch7.50

operaopera_browserMatch7.50beta1

operaopera_browserMatch7.51

operaopera_browserMatch7.52

operaopera_browserMatch7.53

operaopera_browserMatch7.54

operaopera_browserMatch7.54update1

operaopera_browserMatch7.54update2

operaopera_browserMatch7.60

operaopera_browserMatch8.0

operaopera_browserMatch8.0beta1

operaopera_browserMatch8.0beta2

operaopera_browserMatch8.0beta3

operaopera_browserMatch8.01

operaopera_browserMatch8.02

operaopera_browserMatch8.50

operaopera_browserMatch8.51

operaopera_browserMatch8.52

operaopera_browserMatch8.53

operaopera_browserMatch8.54

operaopera_browserMatch9.0

operaopera_browserMatch9.0beta1

operaopera_browserMatch9.0beta2

operaopera_browserMatch9.01

operaopera_browserMatch9.02

operaopera_browserMatch9.10

operaopera_browserMatch9.12

operaopera_browserMatch9.20

operaopera_browserMatch9.20beta1

operaopera_browserMatch9.21

operaopera_browserMatch9.22

operaopera_browserMatch9.23

operaopera_browserMatch9.24

operaopera_browserMatch9.25

operaopera_browserMatch9.26

operaopera_browserMatch9.27

operaopera_browserMatch9.50

operaopera_browserMatch9.50beta1

operaopera_browserMatch9.50beta2

operaopera_browserMatch9.51

operaopera_browserMatch9.52

operaopera_browserMatch9.60

operaopera_browserMatch9.60beta1

operaopera_browserMatch9.61

operaopera_browserMatch9.62

operaopera_browserMatch9.63

operaopera_browserMatch9.64

operaopera_browserMatch10.00

operaopera_browserMatch10.00beta1

operaopera_browserMatch10.00beta2

operaopera_browserMatch10.00beta3

operaopera_browserMatch10.01

operaopera_browserMatch10.10

operaopera_browserMatch10.10beta1

operaopera_browserMatch10.50

operaopera_browserMatch10.50beta1

operaopera_browserMatch10.51

operaopera_browserMatch10.52

AND

microsoftwindows

Node

operaopera_browserRange≤10.53

operaopera_browserMatch6.0

operaopera_browserMatch6.0beta1

operaopera_browserMatch6.0beta2

operaopera_browserMatch6.0beta3

operaopera_browserMatch6.02

operaopera_browserMatch6.03

operaopera_browserMatch7.50

operaopera_browserMatch7.50beta1

operaopera_browserMatch7.51

operaopera_browserMatch7.52

operaopera_browserMatch7.53

operaopera_browserMatch7.54

operaopera_browserMatch7.54update1

operaopera_browserMatch7.54update2

operaopera_browserMatch8.0beta1

operaopera_browserMatch8.01

operaopera_browserMatch8.02

operaopera_browserMatch8.50

operaopera_browserMatch8.51

operaopera_browserMatch8.52

operaopera_browserMatch8.54

operaopera_browserMatch9.0

operaopera_browserMatch9.0beta1

operaopera_browserMatch9.0beta2

operaopera_browserMatch9.01

operaopera_browserMatch9.02

operaopera_browserMatch9.10

operaopera_browserMatch9.20

operaopera_browserMatch9.20beta1

operaopera_browserMatch9.21

operaopera_browserMatch9.22

operaopera_browserMatch9.23

operaopera_browserMatch9.24

operaopera_browserMatch9.25

operaopera_browserMatch9.26

operaopera_browserMatch9.27

operaopera_browserMatch9.50

operaopera_browserMatch9.50beta1

operaopera_browserMatch9.50beta2

operaopera_browserMatch9.51

operaopera_browserMatch9.52

operaopera_browserMatch9.60

operaopera_browserMatch9.60beta1

operaopera_browserMatch9.61

operaopera_browserMatch9.62

operaopera_browserMatch9.63

operaopera_browserMatch9.64

operaopera_browserMatch10.00

operaopera_browserMatch10.00beta1

operaopera_browserMatch10.00beta2

operaopera_browserMatch10.00beta3

operaopera_browserMatch10.01

operaopera_browserMatch10.10

operaopera_browserMatch10.10beta1

operaopera_browserMatch10.50beta1

operaopera_browserMatch10.52

operaopera_browserMatch10.52beta1

operaopera_browserMatch10.52beta2

AND

applemac_os_x

CPENameOperatorVersion
opera:opera_browseropera opera browserle10.53
opera:opera_browseropera opera browsereq5.0
opera:opera_browseropera opera browsereq5.02
opera:opera_browseropera opera browsereq5.10
opera:opera_browseropera opera browsereq5.11
opera:opera_browseropera opera browsereq5.12
opera:opera_browseropera opera browsereq6.0
opera:opera_browseropera opera browsereq6.01
opera:opera_browseropera opera browsereq6.02
opera:opera_browseropera opera browsereq6.03

CPE	Name	Operator	Version
opera:opera_browser	opera opera browser	le	10.53
opera:opera_browser	opera opera browser	eq	5.0
opera:opera_browser	opera opera browser	eq	5.02
opera:opera_browser	opera opera browser	eq	5.10
opera:opera_browser	opera opera browser	eq	5.11
opera:opera_browser	opera opera browser	eq	5.12
opera:opera_browser	opera opera browser	eq	6.0
opera:opera_browser	opera opera browser	eq	6.01
opera:opera_browser	opera opera browser	eq	6.02
opera:opera_browser	opera opera browser	eq	6.03

Rows per page:

1-10 of 641

References

secunia.com/advisories/40250

www.opera.com/docs/changelogs/mac/1054/

www.opera.com/docs/changelogs/windows/1054/

www.opera.com/support/kb/view/962/

www.securityfocus.com/bid/40973

www.vupen.com/english/advisories/2010/1529

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11950

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.1 Low

EPSS

Percentile

94.9%

JSON

Related for CVE-2010-2666

nvd1 prion1 cvelist1 openvas2 nessus1