CVE-2010-2666

 

Published at: - 08-07-2010 02:54

Last modified: - 06-10-2022 02:13

Total changes: - 2

Description

Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem access and directory selection, which allows user-assisted remote attackers to create or modify arbitrary files, and consequently execute arbitrary code, via widget File I/O operations.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:C/I:C/A:C

 

Verification logic

 

Reference

• http://www.opera.com/docs/changelogs/windows/1054/
• http://www.opera.com/docs/changelogs/mac/1054/
• 40250-Vendor Advisory
• ADV-2010-1529-Vendor Advisory
• 40973-
• http://www.opera.com/support/kb/view/962/
• oval:org.mitre.oval:def:11950-

 

Keywords

NVD

 

CVE-2010-2666

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures