5.8

CVE-2009-2068

Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Opera ≫ Opera Version 5..10
Opera ≫ Opera Version 5.0
Opera ≫ Opera Version 5.0 Update beta_2
Opera ≫ Opera Version 5.0 Update beta_3
Opera ≫ Opera Version 5.0 Update beta_4
Opera ≫ Opera Version 5.0 Update beta_5
Opera ≫ Opera Version 5.0 Update beta_6
Opera ≫ Opera Version 5.0 Update beta_7
Opera ≫ Opera Version 5.0 Update beta_8
Opera ≫ Opera Version 5.1
Opera ≫ Opera Version 5.02
Opera ≫ Opera Version 5.2
Opera ≫ Opera Version 5.3
Opera ≫ Opera Version 5.4
Opera ≫ Opera Version 5.5
Opera ≫ Opera Version 5.6
Opera ≫ Opera Version 5.7
Opera ≫ Opera Version 5.8
Opera ≫ Opera Version 5.9
Opera ≫ Opera Version 5.10
Opera ≫ Opera Version 5.11
Opera ≫ Opera Version 5.12
Opera ≫ Opera Version 6 Update beta_1
Opera ≫ Opera Version 6.0
Opera ≫ Opera Version 6.0 Update beta_1
Opera ≫ Opera Version 6.0 Update beta_2
Opera ≫ Opera Version 6.0 Update beta_3
Opera ≫ Opera Version 6.1
Opera ≫ Opera Version 6.01
Opera ≫ Opera Version 6.02
Opera ≫ Opera Version 6.03
Opera ≫ Opera Version 6.04
Opera ≫ Opera Version 6.05
Opera ≫ Opera Version 6.06
Opera ≫ Opera Version 6.11
Opera ≫ Opera Version 6.12
Opera ≫ Opera Version 7 Update beta_1
Opera ≫ Opera Version 7.0
Opera ≫ Opera Version 7.0 Update beta_1
Opera ≫ Opera Version 7.0 Update beta_1v2
Opera ≫ Opera Version 7.0 Update beta_2
Opera ≫ Opera Version 7.01
Opera ≫ Opera Version 7.02
Opera ≫ Opera Version 7.03
Opera ≫ Opera Version 7.10
Opera ≫ Opera Version 7.11
Opera ≫ Opera Version 7.20
Opera ≫ Opera Version 7.20 Update beta7
Opera ≫ Opera Version 7.21
Opera ≫ Opera Version 7.22
Opera ≫ Opera Version 7.23
Opera ≫ Opera Version 7.30
Opera ≫ Opera Version 7.50
Opera ≫ Opera Version 7.50 Update beta_1
Opera ≫ Opera Version 7.51
Opera ≫ Opera Version 7.52
Opera ≫ Opera Version 7.54
Opera ≫ Opera Version 7.54 Update update_1
Opera ≫ Opera Version 7.55
Opera ≫ Opera Version 8.0
Opera ≫ Opera Version 8.0 Update beta_1
Opera ≫ Opera Version 8.0 Update beta_2
Opera ≫ Opera Version 8.01
Opera ≫ Opera Version 8.02
Opera ≫ Opera Version 8.51
Opera ≫ Opera Version 8.52
Opera ≫ Opera Version 8.53
Opera ≫ Opera Version 8.54
Opera ≫ Opera Version 9.0 Update beta_1
Opera ≫ Opera Version 9.01
Opera ≫ Opera Version 9.02
Opera ≫ Opera Version 9.10
Opera ≫ Opera Version 9.20
Opera ≫ Opera Version 9.21
Opera ≫ Opera Version 9.23
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.24% 0.653
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://research.microsoft.com/apps/pubs/default.aspx?id=79323
http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51192