CVE-2010-4047

 

Published at: - 21-10-2010 09:00

Last modified: - 06-10-2022 02:13

Total changes: - 2

Description

Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• http://www.opera.com/support/kb/view/976/
• 1024570-
• http://www.opera.com/docs/changelogs/unix/1063/
• http://www.opera.com/docs/changelogs/mac/1063/
• http://www.opera.com/docs/changelogs/windows/1063/
• 41740-Vendor Advisory
• oval:org.mitre.oval:def:12115-

 

Keywords

NVD

 

CVE-2010-4047

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures