Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-0815

Опубликовано: 06 фев. 2014
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
Версия до 17.00 (включая)
cpe:2.3:a:opera:opera_browser:1.00:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.00:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.00:alpha:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.00:beta1:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.00:beta2:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.00:beta3:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.01:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.10:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.10:beta1:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.11:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.20:alpha:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.50:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.50:beta1:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.50:beta2:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.51:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.52:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.52:beta1:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.52:beta2:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.53:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.53:b:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.53:beta1:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.54:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.60:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.60:alpha:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.60:beta1:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.61:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.62:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:10.63:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.00:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.00:beta:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.01:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.10:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.10:beta:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.11:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.50:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.50:beta:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.51:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.52:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.52.1100:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.60:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.60:beta:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.61:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.62:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.64:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.65:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.66:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:11.67:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:12.00:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:12.00:beta:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:12.01:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:12.02:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:12.10:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:12.10:beta:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:12.11:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:12.12:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:12.13:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:12.14:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:12.15:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:15.00:*:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:15.00:next:*:*:*:*:*:*
cpe:2.3:a:opera:opera_browser:16.00:*:*:*:*:*:*:*
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

EPSS

Процентиль: 59%
0.00375
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

github
больше 3 лет назад

The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies.

EPSS

Процентиль: 59%
0.00375
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-200