CVEvulnerability
CVE-2010-2665
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-07-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Opera before 10.54 on Windows and Mac OS X, and before 10.11 on UNIX platforms, allows remote attackers to inject arbitrary web script or HTML via a data: URI, related to incorrect detection of the "opening site."
Affected configurations
• opera opera browser (<= 10.53)
• opera opera browser 5.0
• opera opera browser 5.02
• opera opera browser 5.10
• opera opera browser 5.11
• opera opera browser 5.12
• opera opera browser 6.0
• opera opera browser 6.01
• opera opera browser 6.02
• opera opera browser 6.03
• opera opera browser 6.04
• opera opera browser 6.05
• opera opera browser 6.06
• opera opera browser 7.0
• opera opera browser 7.01
• opera opera browser 7.02
• opera opera browser 7.03
• opera opera browser 7.10
• opera opera browser 7.11
• opera opera browser 7.20
• opera opera browser 7.21
• opera opera browser 7.22
• opera opera browser 7.23
• opera opera browser 7.50
• opera opera browser 7.51
• opera opera browser 7.52
• opera opera browser 7.53
• opera opera browser 7.54
• opera opera browser 7.60
• opera opera browser 8.0
• opera opera browser 8.01
• opera opera browser 8.02
• opera opera browser 8.50
• opera opera browser 8.51
• opera opera browser 8.52
• opera opera browser 8.53
• opera opera browser 8.54
• opera opera browser 9.0
• opera opera browser 9.01
• opera opera browser 9.02
• opera opera browser 9.10
• opera opera browser 9.12
• opera opera browser 9.20
• opera opera browser 9.21
• opera opera browser 9.22
• opera opera browser 9.23
• opera opera browser 9.24
• opera opera browser 9.25
• opera opera browser 9.26
• opera opera browser 9.27
• opera opera browser 9.50
• opera opera browser 9.51
• opera opera browser 9.52
• opera opera browser 9.60
• opera opera browser 9.61
• opera opera browser 9.62
• opera opera browser 9.63
• opera opera browser 9.64
• opera opera browser 10.00
• opera opera browser 10.01
… and 8 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/40250 Vendor Advisory
- http://www.opera.com/docs/changelogs/mac/1054/ www.opera.com
- http://www.opera.com/docs/changelogs/unix/1011/ www.opera.com
- http://www.opera.com/docs/changelogs/windows/1054/ www.opera.com
- http://www.opera.com/support/kb/view/955/ Vendor Advisory
- http://www.securityfocus.com/bid/40973 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/1529 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60646 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11362 oval.cisecurity.org
- http://secunia.com/advisories/40250 Vendor Advisory
- http://www.opera.com/docs/changelogs/mac/1054/ www.opera.com
- http://www.opera.com/docs/changelogs/unix/1011/ www.opera.com
- http://www.opera.com/docs/changelogs/windows/1054/ www.opera.com
- http://www.opera.com/support/kb/view/955/ Vendor Advisory
- http://www.securityfocus.com/bid/40973 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/1529 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60646 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11362 oval.cisecurity.org