NVD

Id
15363  
Name
CVE-2010-4045  
Description
Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site scripting (XSS) attacks, and possibly execute arbitrary code by leveraging the ability of a script to interact with a web page from (1) a different domain or (2) a different security context.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-10-21  
Modified Date
2011-07-18  
Seq
2010-4045  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86523 15363 CVE-2010-4045 oval:org.mitre.oval:def:12071  View
86524 15363 CVE-2010-4045 1024570  View
86525 15363 CVE-2010-4045 http://www.opera.com/docs/changelogs/mac/1063/  View
86526 15363 CVE-2010-4045 http://www.opera.com/docs/changelogs/unix/1063/  View
86527 15363 CVE-2010-4045 http://www.opera.com/docs/changelogs/windows/1063/  View
86528 15363 CVE-2010-4045 http://www.opera.com/support/kb/view/973/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37528 JVNDB-2010-003313 Opera におけるアドレスバーを偽造される脆弱性 Opera は、リロードおよびリダイレクトを含む環境で Web スクリプトを適切に制限しないため、アドレスバーを偽造される、クロスサイトスクリプティング攻撃をうける、および任意のコードを実行される脆弱性が存在します。 CVE-2010-4045 46625 CVE-2010-4045 15363 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003313.html 2010-10-12 2012-03-27 View