CVE-2009-3832

EPSS 1.22%
Veröffentlicht 30.10.2009 20:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Opera ≫ Opera Browser Version < 10.01

Microsoft ≫ Windows

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.22%	0.771

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:N/I:P/A:P

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

http://secunia.com/advisories/37182

Broken Link

http://www.opera.com/docs/changelogs/windows/1001/

Vendor Advisory

Broken Link

http://www.securityfocus.com/bid/36850

Patch

Third Party Advisory

Broken Link

VDB Entry

http://www.vupen.com/english/advisories/2009/3073

Patch

Vendor Advisory

Broken Link

http://www.opera.com/support/kb/view/940/

Vendor Advisory

Broken Link

http://www.osvdb.org/59359

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/54022

Third Party Advisory

VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6384

Tool Signature

https://nvd.nist.gov/vuln/detail/CVE-2009-3832

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-3832

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-3832

EUVD