CVEvulnerability
CVE-2011-0684
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-01-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
Opera before 11.01 does not properly handle redirections and unspecified other HTTP responses, which allows remote web servers to obtain sufficient access to local files to use these files as page resources, and consequently obtain potentially sensitive information from the contents of the files, via an unknown response manipulation.
Affected configurations
• opera opera browser (<= 11.00)
• opera opera browser 5.0
• opera opera browser 5.02
• opera opera browser 5.10
• opera opera browser 5.11
• opera opera browser 5.12
• opera opera browser 6.0
• opera opera browser 6.1
• opera opera browser 6.01
• opera opera browser 6.02
• opera opera browser 6.03
• opera opera browser 6.04
• opera opera browser 6.05
• opera opera browser 6.06
• opera opera browser 6.11
• opera opera browser 6.12
• opera opera browser 7.0
• opera opera browser 7.01
• opera opera browser 7.02
• opera opera browser 7.03
• opera opera browser 7.10
• opera opera browser 7.11
• opera opera browser 7.20
• opera opera browser 7.21
• opera opera browser 7.22
• opera opera browser 7.23
• opera opera browser 7.50
• opera opera browser 7.51
• opera opera browser 7.52
• opera opera browser 7.53
• opera opera browser 7.54
• opera opera browser 7.60
• opera opera browser 8.0
• opera opera browser 8.01
• opera opera browser 8.02
• opera opera browser 8.50
• opera opera browser 8.51
• opera opera browser 8.52
• opera opera browser 8.53
• opera opera browser 8.54
• opera opera browser 9.0
• opera opera browser 9.01
• opera opera browser 9.02
• opera opera browser 9.10
• opera opera browser 9.12
• opera opera browser 9.20
• opera opera browser 9.21
• opera opera browser 9.22
• opera opera browser 9.23
• opera opera browser 9.24
• opera opera browser 9.25
• opera opera browser 9.26
• opera opera browser 9.27
• opera opera browser 9.50
• opera opera browser 9.51
• opera opera browser 9.52
• opera opera browser 9.60
• opera opera browser 9.61
• opera opera browser 9.62
• opera opera browser 9.63
… and 14 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://osvdb.org/70730 osvdb.org
- http://secunia.com/advisories/43023 secunia.com
- http://www.opera.com/docs/changelogs/mac/1101/ www.opera.com
- http://www.opera.com/docs/changelogs/unix/1101/ www.opera.com
- http://www.opera.com/docs/changelogs/windows/1101/ www.opera.com
- http://www.opera.com/support/kb/view/984/ Vendor Advisory
- http://www.securityfocus.com/bid/46036 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0231 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12296 oval.cisecurity.org
- http://osvdb.org/70730 osvdb.org
- http://secunia.com/advisories/43023 secunia.com
- http://www.opera.com/docs/changelogs/mac/1101/ www.opera.com
- http://www.opera.com/docs/changelogs/unix/1101/ www.opera.com
- http://www.opera.com/docs/changelogs/windows/1101/ www.opera.com
- http://www.opera.com/support/kb/view/984/ Vendor Advisory
- http://www.securityfocus.com/bid/46036 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0231 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12296 oval.cisecurity.org