Oval Definition:oval:org.mitre.oval:def:11950
Revision Date:2013-12-23Version:8
Title:Remote code execution in Opera before 10.54 due to failure to enforce permission requirements for widget filesystem access and directory selection
Description:Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem access and directory selection, which allows user-assisted remote attackers to create or modify arbitrary files, and consequently execute arbitrary code, via widget File I/O operations.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-2666
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Opera Browser
Definition Synopsis
  • Opera Browser is installed
  • AND Check if HKLM\SOFTWARE\Classes\Applications\Opera.exe\shell\open\command exists
  • AND Opera.exe version less than 10.54
  • BACK