QwikSec

Security Database

CVE

CWE

Training

CVE-2010-4045

Published: Oct 21, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site scripting (XSS) attacks, and possibly execute arbitrary code by leveraging the ability of a script to interact with a web page from (1) a different domain or (2) a different security context.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.opera.com/support/kb/view/973/

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

http://www.opera.com/docs/changelogs/mac/1063/

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

oval:org.mitre.oval:def:12071

vdb-entry

signature

x_refsource_OVAL

http://www.opera.com/docs/changelogs/unix/1063/

x_refsource_CONFIRM

http://www.opera.com/docs/changelogs/windows/1063/

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.