CVE-2009-2059: Medium severity web browser for android vulnerability
Published Jun 15, 2009
·Updated
Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
Affected Software
21 affected components
opera Opera Browser=7.23
opera Opera Browser=9.02
opera Opera Browser=7.53
opera Opera Browser=8.50
opera Opera Browser=8.53
opera Opera Browser=9.12
opera Opera Browser=8.0
opera Opera Browser<=9.22
opera Opera Browser=8.54
opera Opera Browser=8.02
opera Opera Browser=9.20
opera Opera Browser=9.21
opera Opera Browser=8.51
opera Opera Browser=7.60
opera Opera Browser=7.54
opera Opera Browser=9.01
opera Opera Browser=9.0
opera Opera Browser=9.10
opera Opera Browser=8.52
opera Opera Browser=8.01
opera Opera Browser=7.0
Event History
Jun 15, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2059?
CVE-2009-2059 is classified as a medium severity vulnerability that allows man-in-the-middle attacks.
2
How do I fix CVE-2009-2059?
To mitigate CVE-2009-2059, upgrade your Opera browser to version 9.25 or later.
3
Which versions of Opera are affected by CVE-2009-2059?
CVE-2009-2059 affects Opera versions prior to 9.25, including versions 7.0 to 9.22.
4
What type of attack does CVE-2009-2059 enable?
CVE-2009-2059 enables man-in-the-middle attacks through HTTPS connections.
5
Can CVE-2009-2059 affect secure data transmission?
Yes, CVE-2009-2059 can compromise secure data transmission by allowing arbitrary web script execution.