Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2009-3049 | First vendor Publication | 2009-09-02 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3049 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:6235 | |||
| Oval ID: | oval:org.mitre.oval:def:6235 | ||
| Title: | Opera before 10.00 does not properly display all characters in Internationalized Domain Names | ||
| Description: | Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2009-3049 | Version: | 9 |
| Platform(s): | Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 | Product(s): | Opera Browser |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-08-10 | Name : Gentoo Security Advisory GLSA 201206-03 (Opera) File : nvt/glsa_201206_03.nasl |
| 2009-09-07 | Name : Opera Multiple URL Spoofing Vulnerabilities - Sep09 (Linux) File : nvt/gb_opera_mult_url_spoof_vuln_sep09_lin.nasl |
| 2009-09-07 | Name : Opera Multiple URL Spoofing Vulnerabilities - Sep09 (Win) File : nvt/gb_opera_mult_url_spoof_vuln_sep09_win.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 57641 | Opera Unicode Character Handling Address Bar Spoofing Weakness |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2012-06-21 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201206-03.nasl - Type : ACT_GATHER_INFO |
| 2009-09-01 | Name : The remote host contains a web browser that is affected by multiple issues. File : opera_1000.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:10:27 |
|
| 2024-11-28 12:19:45 |
|
| 2022-03-02 01:07:41 |
|
| 2022-02-26 12:07:29 |
|
| 2021-05-04 12:10:04 |
|
| 2021-04-22 01:10:26 |
|
| 2020-05-23 01:40:49 |
|
| 2020-05-23 00:24:16 |
|
| 2018-10-31 00:19:58 |
|
| 2017-09-19 09:23:22 |
|
| 2016-06-28 17:49:00 |
|
| 2016-04-26 19:04:55 |
|
| 2014-02-17 10:51:29 |
|
| 2013-05-10 23:56:37 |
|
