Oval Definition:oval:org.mitre.oval:def:12115
Revision Date:2013-12-23Version:8
Title:Cross-site scripting (XSS) attacks via a crafted web site in Opera version less than 10.63.3516.0
Description:Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-4047
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Opera Browser
Definition Synopsis
  • Opera Browser is installed
  • AND Check if HKLM\SOFTWARE\Classes\Applications\Opera.exe\shell\open\command exists
  • AND Check if Opera version is less than 10.63.3516.0
    • BACK