CVE-2009-4071
24.11.2009, 17:30
Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| opera | opera_browser | 𝑥 ≤ 10.10 |
| opera | opera_browser | 7.0 |
| opera | opera_browser | 7.23 |
| opera | opera_browser | 7.53 |
| opera | opera_browser | 7.54 |
| opera | opera_browser | 7.60 |
| opera | opera_browser | 8.0 |
| opera | opera_browser | 8.01 |
| opera | opera_browser | 8.02 |
| opera | opera_browser | 8.50 |
| opera | opera_browser | 8.51 |
| opera | opera_browser | 8.52 |
| opera | opera_browser | 8.53 |
| opera | opera_browser | 8.54 |
| opera | opera_browser | 9.0 |
| opera | opera_browser | 9.01 |
| opera | opera_browser | 9.02 |
| opera | opera_browser | 9.10 |
| opera | opera_browser | 9.12 |
| opera | opera_browser | 9.20 |
| opera | opera_browser | 9.21 |
| opera | opera_browser | 9.22 |
| opera | opera_browser | 9.51 |
| opera | opera_browser | 9.52 |
| opera | opera_browser | 9.64 |
| opera | opera_browser | 10.00 |
| opera | opera_browser | 10.00:beta_3 |
| opera | opera_browser | 10.01 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References