CVE-2010-2657

Опубликовано: 08 июл. 2010

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Opera before 10.60 on Windows and Mac OS X does not properly prevent certain double-click operations from running a program located on a web site, which allows user-assisted remote attackers to execute arbitrary code via a crafted web page that bypasses a dialog.

Ссылки

http://secunia.com/advisories/40375
Third Party Advisory
http://www.opera.com/docs/changelogs/mac/1060/
Vendor Advisory
http://www.opera.com/docs/changelogs/windows/1060/
Vendor Advisory
http://www.opera.com/support/search/view/957/
Vendor Advisory
http://www.vupen.com/english/advisories/2010/1664
Permissions Required
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11856
Third Party Advisory
http://secunia.com/advisories/40375
Third Party Advisory
http://www.opera.com/docs/changelogs/mac/1060/
Vendor Advisory
http://www.opera.com/docs/changelogs/windows/1060/
Vendor Advisory
http://www.opera.com/support/search/view/957/
Vendor Advisory
http://www.vupen.com/english/advisories/2010/1664
Permissions Required
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11856
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*

Версия до 10.60 (исключая)

Одно из

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00511

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-4h96-7qc2-2vv3

github

больше 3 лет назад