Executive Summary

Informations
Name	CVE-2009-0915	First vendor Publication	2009-03-16
Vendor	Cve	Last vendor Modification	2010-08-21

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score	6.8	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to plug-ins.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0915

OVAL Definitions

 

Definition Id: oval:org.mitre.oval:def:6220
Oval ID:	oval:org.mitre.oval:def:6220
Title:	Opera cross-domain scripting attacks Vulnerability
Description:	Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to plug-ins.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-0915	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Vista	Product(s):	Opera Browser
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Opera version is less than 9.64 (9.64.10487.0)

CPE : Common Platform Enumeration

Type	Description	Count
Application	Opera Opera cpe:/a:opera:opera:9.63 cpe:/a:opera:opera:9.62 cpe:/a:opera:opera:9.61 cpe:/a:opera:opera:9.60:beta_1 cpe:/a:opera:opera:9.60 cpe:/a:opera:opera:9.52 cpe:/a:opera:opera:9.51 cpe:/a:opera:opera:9.50:beta_2 cpe:/a:opera:opera:9.50 cpe:/a:opera:opera:9.50:beta_1 cpe:/a:opera:opera:9.27 cpe:/a:opera:opera:9.26 cpe:/a:opera:opera:9.25 cpe:/a:opera:opera:9.24 cpe:/a:opera:opera:9.23 cpe:/a:opera:opera:9.22 cpe:/a:opera:opera:9.21 cpe:/a:opera:opera:9.20:beta_1 cpe:/a:opera:opera:9.20 cpe:/a:opera:opera:9.1tp cpe:/a:opera:opera:9.10 cpe:/a:opera:opera:9.02 cpe:/a:opera:opera:9.01 cpe:/a:opera:opera:9.0 cpe:/a:opera:opera:9.0:beta_1 cpe:/a:opera:opera:9.0:beta_2 cpe:/a:opera:opera:8.54 cpe:/a:opera:opera:8.53 cpe:/a:opera:opera:8.52 cpe:/a:opera:opera:8.51 cpe:/a:opera:opera:8.02 cpe:/a:opera:opera:8.01 cpe:/a:opera:opera:8.0:beta_1 cpe:/a:opera:opera:8.0:beta_3 cpe:/a:opera:opera:8.0:beta_2 cpe:/a:opera:opera:8.0 cpe:/a:opera:opera:7.55 cpe:/a:opera:opera:7.54 cpe:/a:opera:opera:7.54:update_2 cpe:/a:opera:opera:7.54:update_1 cpe:/a:opera:opera:7.53 cpe:/a:opera:opera:7.52 cpe:/a:opera:opera:7.51 cpe:/a:opera:opera:7.50:beta_1 cpe:/a:opera:opera:7.50 cpe:/a:opera:opera:7.30 cpe:/a:opera:opera:7.23 cpe:/a:opera:opera:7.22 cpe:/a:opera:opera:7.21 cpe:/a:opera:opera:7.20:beta7 cpe:/a:opera:opera:7.20 cpe:/a:opera:opera:7.11 cpe:/a:opera:opera:7.10 cpe:/a:opera:opera:7.03 cpe:/a:opera:opera:7.02 cpe:/a:opera:opera:7.01 cpe:/a:opera:opera:7.0:beta_1 cpe:/a:opera:opera:7.0 cpe:/a:opera:opera:7.0:beta_1v2 cpe:/a:opera:opera:7.0:beta_2 cpe:/a:opera:opera:6.1 cpe:/a:opera:opera:6.06 cpe:/a:opera:opera:6.05 cpe:/a:opera:opera:6.04 cpe:/a:opera:opera:6.03 cpe:/a:opera:opera:6.02 cpe:/a:opera:opera:6.01	67
Application	Opera Software Opera Web Browser cpe:/a:opera_software:opera_web_browser:6.0b1 cpe:/a:opera_software:opera_web_browser:5.12 cpe:/a:opera_software:opera_web_browser:5.11 cpe:/a:opera_software:opera_web_browser:5.10 cpe:/a:opera_software:opera_web_browser:5.02 cpe:/a:opera_software:opera_web_browser:5.01 cpe:/a:opera_software:opera_web_browser:5.0 cpe:/a:opera_software:opera_web_browser:4.02 cpe:/a:opera_software:opera_web_browser:4.01 cpe:/a:opera_software:opera_web_browser:4.0tp cpe:/a:opera_software:opera_web_browser:4.0b6 cpe:/a:opera_software:opera_web_browser:4.0b5 cpe:/a:opera_software:opera_web_browser:4.0b4 cpe:/a:opera_software:opera_web_browser:4.0b3 cpe:/a:opera_software:opera_web_browser:4.0b2 cpe:/a:opera_software:opera_web_browser:4.0 cpe:/a:opera_software:opera_web_browser:3.62 cpe:/a:opera_software:opera_web_browser:3.6.2b cpe:/a:opera_software:opera_web_browser:3.6.1 cpe:/a:opera_software:opera_web_browser:3.6 cpe:/a:opera_software:opera_web_browser:3.5.1 cpe:/a:opera_software:opera_web_browser:3.5 cpe:/a:opera_software:opera_web_browser:3.2.1 cpe:/a:opera_software:opera_web_browser:3.1 cpe:/a:opera_software:opera_web_browser:3.0	25

Open Source Vulnerability Database (OSVDB)

id	Description
52646	Opera Plug-ins Unspecified Cross-domain Scripting

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/33961
CONFIRM	http://www.opera.com/docs/changelogs/freebsd/964/ http://www.opera.com/docs/changelogs/linux/964/ http://www.opera.com/docs/changelogs/mac/964/ http://www.opera.com/docs/changelogs/solaris/964/ http://www.opera.com/docs/changelogs/windows/964/
SECUNIA	http://secunia.com/advisories/34135 http://secunia.com/advisories/34418
SUSE	http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html
VUPEN	http://www.vupen.com/english/advisories/2009/0586

Alert History

Date	Informations
2013-05-10 23:46:21	Multiple Updates