CVE-2009-3832

CVSS V2 Medium 5.8 CVSS V3 None
Description
Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site.
Overview
  • CVE ID
  • CVE-2009-3832
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2009-10-30T20:30:00
  • Last Modified Date
  • 2022-03-01T15:08:18
Weakness Enumerations
CWE URL
CWE-601 http://cwe.mitre.org/data/definitions/601.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:* 1 OR 10.01
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* 0 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:N/I:P/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 5.8
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 4.9
References
Reference URL Reference Tags
http://www.securityfocus.com/bid/36850 Broken Link Patch Third Party Advisory VDB Entry
http://www.osvdb.org/59359 Broken Link
http://www.vupen.com/english/advisories/2009/3073 Broken Link Patch Vendor Advisory
http://www.opera.com/support/kb/view/940/ Broken Link Vendor Advisory
http://secunia.com/advisories/37182 Broken Link
http://www.opera.com/docs/changelogs/windows/1001/ Broken Link Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54022 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6384 Tool Signature
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2009-3832
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3832
History
Created Old Value New Value Data Type Notes
2022-05-10 15:48:01 Added to TrackCVE