Test ID:	1.3.6.1.4.1.25623.1.0.801370
Category:	General
Title:	Opera Browser < 10.54 Multiple Vulnerabilities (Jul 2010) - Windows
Summary:	Opera web browser is prone to multiple vulnerabilities.
Description:	Summary: Opera web browser is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - Fails to restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains. - Fails to properly restrict access to the full pathname of a file selected for upload, which allows attackers to obtain potentially sensitive information. - Cross site scripting (XSS) vulnerability when handling a data: URI. - Fails to properly enforce permission requirements for widget filesystem. Vulnerability Impact: Successful exploitation will let attackers to cause a denial of service or execute arbitrary code. Affected Software/OS: Opera version prior to 10.54 on Windows. Solution: Upgrade to Opera 10.54 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2660 BugTraq ID: 40973 http://www.securityfocus.com/bid/40973 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11603 http://secunia.com/advisories/40250 http://www.vupen.com/english/advisories/2010/1529 http://www.vupen.com/english/advisories/2010/1673 Common Vulnerability Exposure (CVE) ID: CVE-2010-2661 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11669 Common Vulnerability Exposure (CVE) ID: CVE-2010-2665 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11362 XForce ISS Database: opera-datauri-xss(60646) https://exchange.xforce.ibmcloud.com/vulnerabilities/60646 Common Vulnerability Exposure (CVE) ID: CVE-2010-2666 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11950
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.