National Cyber Awareness System

Vulnerability Summary for CVE-2009-4071

Overview

Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via unspecified vectors.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://www.opera.com/docs/changelogs/windows/1010/

Type: Patch Information

Hyperlink:http://www.opera.com/docs/changelogs/windows/1010/

External Source: CONFIRM

Name: http://www.opera.com/docs/changelogs/unix/1010/

Type: Patch Information

Hyperlink:http://www.opera.com/docs/changelogs/unix/1010/

External Source: CONFIRM

Name: http://www.opera.com/docs/changelogs/mac/1010/

Type: Patch Information

Hyperlink:http://www.opera.com/docs/changelogs/mac/1010/

External Source: VUPEN

Name: ADV-2009-3297

Hyperlink:http://www.vupen.com/english/advisories/2009/3297

External Source: BID

Name: 37089

Hyperlink:http://www.securityfocus.com/bid/37089

External Source: CONFIRM

Name: http://www.opera.com/support/kb/view/941/

Type: Advisory

Hyperlink:http://www.opera.com/support/kb/view/941/

External Source: SECUNIA

Name: 37469

Hyperlink:http://secunia.com/advisories/37469

External Source: OVAL

Name: oval:org.mitre.oval:def:6385

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6385

External Source: OSVDB

Name: 60527

Hyperlink:http://osvdb.org/60527

References to Check Content

Identifier:oval:org.mitre.oval:def:6385

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:6385