Oval Definition:oval:org.mitre.oval:def:11669
Revision Date:2013-12-23Version:7
Title:Information Disclosure in Opera before 10.54 due to failure to restrict access to the full pathname of a file selected for upload.
Description:Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict access to the full pathname of a file selected for upload, which allows remote attackers to obtain potentially sensitive information via unspecified DOM manipulations.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-2661
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Opera Browser
Definition Synopsis
  • Opera Browser is installed
  • AND Check if HKLM\SOFTWARE\Classes\Applications\Opera.exe\shell\open\command exists
  • AND Opera.exe version less than 10.54
  • BACK