Lucene search
HistoryJan 31, 2011 - 8:00 p.m.
CVE-2011-0450
opera
cve-2011-0450
vulnerability
downloads manager
windows
nvd
remote code execution
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
7.3 High
AI Score
Confidence
Low
0.049 Low
EPSS
Percentile
92.8%
The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote attackers to execute arbitrary code via a crafted web site that hosts an executable file.
Affected configurations
Node
operaopera_browserRange≤11.00
ORoperaopera_browserMatch5.0
ORoperaopera_browserMatch5.0beta2
ORoperaopera_browserMatch5.0beta3
ORoperaopera_browserMatch5.0beta4
ORoperaopera_browserMatch5.0beta5
ORoperaopera_browserMatch5.0beta6
ORoperaopera_browserMatch5.0beta7
ORoperaopera_browserMatch5.0beta8
ORoperaopera_browserMatch5.02
ORoperaopera_browserMatch5.10
ORoperaopera_browserMatch5.11
ORoperaopera_browserMatch5.12
ORoperaopera_browserMatch6.0
ORoperaopera_browserMatch6.0beta1
ORoperaopera_browserMatch6.0beta2
ORoperaopera_browserMatch6.0tp1
ORoperaopera_browserMatch6.0tp2
ORoperaopera_browserMatch6.0tp3
ORoperaopera_browserMatch6.1
ORoperaopera_browserMatch6.01
ORoperaopera_browserMatch6.1beta1
ORoperaopera_browserMatch6.02
ORoperaopera_browserMatch6.03
ORoperaopera_browserMatch6.04
ORoperaopera_browserMatch6.05
ORoperaopera_browserMatch6.06
ORoperaopera_browserMatch6.11
ORoperaopera_browserMatch6.12
ORoperaopera_browserMatch7.0
ORoperaopera_browserMatch7.0beta1
ORoperaopera_browserMatch7.0beta1_v2
ORoperaopera_browserMatch7.0beta2
ORoperaopera_browserMatch7.01
ORoperaopera_browserMatch7.02
ORoperaopera_browserMatch7.03
ORoperaopera_browserMatch7.10
ORoperaopera_browserMatch7.10beta1
ORoperaopera_browserMatch7.11
ORoperaopera_browserMatch7.11beta2
ORoperaopera_browserMatch7.20
ORoperaopera_browserMatch7.20beta7
ORoperaopera_browserMatch7.21
ORoperaopera_browserMatch7.22
ORoperaopera_browserMatch7.23
ORoperaopera_browserMatch7.50
ORoperaopera_browserMatch7.50beta1
ORoperaopera_browserMatch7.51
ORoperaopera_browserMatch7.52
ORoperaopera_browserMatch7.53
ORoperaopera_browserMatch7.54
ORoperaopera_browserMatch7.54update1
ORoperaopera_browserMatch7.54update2
ORoperaopera_browserMatch7.60
ORoperaopera_browserMatch8.0
ORoperaopera_browserMatch8.0beta1
ORoperaopera_browserMatch8.0beta2
ORoperaopera_browserMatch8.0beta3
ORoperaopera_browserMatch8.01
ORoperaopera_browserMatch8.02
ORoperaopera_browserMatch8.50
ORoperaopera_browserMatch8.51
ORoperaopera_browserMatch8.52
ORoperaopera_browserMatch8.53
ORoperaopera_browserMatch8.54
ORoperaopera_browserMatch9.0
ORoperaopera_browserMatch9.0beta1
ORoperaopera_browserMatch9.0beta2
ORoperaopera_browserMatch9.01
ORoperaopera_browserMatch9.02
ORoperaopera_browserMatch9.10
ORoperaopera_browserMatch9.12
ORoperaopera_browserMatch9.20
ORoperaopera_browserMatch9.20beta1
ORoperaopera_browserMatch9.21
ORoperaopera_browserMatch9.22
ORoperaopera_browserMatch9.23
ORoperaopera_browserMatch9.24
ORoperaopera_browserMatch9.25
ORoperaopera_browserMatch9.26
ORoperaopera_browserMatch9.27
ORoperaopera_browserMatch9.50
ORoperaopera_browserMatch9.50beta1
ORoperaopera_browserMatch9.50beta2
ORoperaopera_browserMatch9.51
ORoperaopera_browserMatch9.52
ORoperaopera_browserMatch9.60
ORoperaopera_browserMatch9.60beta1
ORoperaopera_browserMatch9.61
ORoperaopera_browserMatch9.62
ORoperaopera_browserMatch9.63
ORoperaopera_browserMatch9.64
ORoperaopera_browserMatch10.00
ORoperaopera_browserMatch10.00beta1
ORoperaopera_browserMatch10.00beta2
ORoperaopera_browserMatch10.00beta3
ORoperaopera_browserMatch10.01
ORoperaopera_browserMatch10.10
ORoperaopera_browserMatch10.10beta1
ORoperaopera_browserMatch10.50
ORoperaopera_browserMatch10.50beta1
ORoperaopera_browserMatch10.50beta2
ORoperaopera_browserMatch10.51
ORoperaopera_browserMatch10.52
ORoperaopera_browserMatch10.53
ORoperaopera_browserMatch10.53b
ORoperaopera_browserMatch10.54
ORoperaopera_browserMatch10.60
ORoperaopera_browserMatch10.60beta1
ORoperaopera_browserMatch10.61
ORoperaopera_browserMatch10.62
ORoperaopera_browserMatch10.63
ORoperaopera_browserMatch11.00beta
microsoftwindows
References
jvn.jp/en/jp/JVN33880169/index.html
jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000010.html
osvdb.org/70726
secunia.com/advisories/43023
www.opera.com/docs/changelogs/windows/1101/
www.opera.com/support/kb/view/985/
www.vupen.com/english/advisories/2011/0231
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12369
Related
nvd
nvd
CVE-2011-0450
2011-01-31 20:00:49
jvn
jvn
JVN#33880169: Opera may insecurely load executable files
2011-02-02 00:00:00
cvelist
cvelist
CVE-2011-0450
2011-01-31 19:00:00
prion
prion
Code injection
2011-01-31 20:00:00
opera
opera
The wrong executable may be used to display a downloaded file in its folder
2011-01-28 00:00:00
openvas
openvas
FreeBSD Ports: opera, opera-devel, linux-opera
2011-03-05 00:00:00
Opera Browser Multiple Vulnerabilities (Feb 2011) - Windows
2011-02-07 00:00:00
Opera Browser Multiple Vulnerabilities Feb-11 (Windows)
2011-02-07 00:00:00
nessus
nessus
Opera < 11.01 Multiple Vulnerabilities
2011-01-27 00:00:00
freebsd
freebsd
opera -- multiple vulnerabilities
2011-01-26 00:00:00
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
7.3 High
AI Score
Confidence
Low
0.049 Low
EPSS
Percentile
92.8%
Related for CVE-2011-0450