CVE-2009-3046: High severity opera vulnerability
Published Sep 2, 2009
·Updated
Opera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes it easier for remote SSL servers to bypass validation of the certificate chain via a revoked certificate.
Affected Software
115 affected components
opera Opera Browser=4.01
opera Opera Browser=7.01
opera Opera Browser=9.27
opera Opera Browser=7.23
opera Opera Browser=2.10
opera Opera Browser=9.50-beta1
opera Opera Browser=9.02
opera Opera Browser=2.10-beta2
opera Opera Browser=7.03
opera Opera Browser=7.53
opera Opera Browser=4.00-beta6
opera Opera Browser=8.50
opera Opera Browser=9.50
opera Opera Browser=9.24
opera Opera Browser=4.00-beta3
opera Opera Browser=5.0-beta2
opera Opera Browser=5.11
opera Opera Browser=3.51
opera Opera Browser=6.1
opera Opera Browser=7.20
opera Opera Browser=6.02
opera Opera Browser=2.00
opera Opera Browser=9.51
opera Opera Browser=5.02
opera Opera Browser=1.00
opera Opera Browser=9.26
opera Opera Browser=5.10
opera Opera Browser=8.53
opera Opera Browser=9.12
opera Opera Browser=7.11-beta2
opera Opera Browser=8.0
opera Opera Browser=4.00
opera Opera Browser=2.10-beta1
opera Opera Browser=6.04
opera Opera Browser=8.54
opera Opera Browser=6.11
opera Opera Browser=5.0-beta4
opera Opera Browser=6.05
opera Opera Browser=8.02
opera Opera Browser=9.20
opera Opera Browser=7.50-beta1
opera Opera Browser=3.10
opera Opera Browser=5.12
opera Opera Browser=4.02
opera Opera Browser=9.21
opera Opera Browser=7.10
opera Opera Browser<=10.00
opera Opera Browser=9.0-beta1
opera Opera Browser=6.0-tp3
opera Opera Browser=3.50
opera Opera Browser=9.23
opera Opera Browser=6.0-tp1
opera Opera Browser=8.0-beta3
opera Opera Browser=3.61
opera Opera Browser=5.0-beta8
opera Opera Browser=7.0-beta1_v2
opera Opera Browser=3.00-beta
opera Opera Browser=8.51
opera Opera Browser=5.0-beta5
opera Opera Browser=4.00-beta5
opera Opera Browser=7.50
opera Opera Browser=7.02
opera Opera Browser=7.21
opera Opera Browser=6.0-tp2
opera Opera Browser=5.0-beta7
opera Opera Browser=7.20-beta7
opera Opera Browser=7.54-update1
opera Opera Browser=9.20-beta1
opera Opera Browser=7.60
opera Opera Browser=7.11
opera Opera Browser=7.0-beta2
opera Opera Browser=4.00-beta2
opera Opera Browser=7.54
opera Opera Browser=9.0-beta2
opera Opera Browser=10.00-alpha
opera Opera Browser=6.03
opera Opera Browser=3.00
opera Opera Browser=7.0-beta1
opera Opera Browser=9.22
opera Opera Browser=6.0-beta1
opera Opera Browser=3.62
opera Opera Browser=2.10-beta3
opera Opera Browser=9.01
opera Opera Browser=9.0
opera Opera Browser=3.60
opera Opera Browser=5.0
opera Opera Browser=9.25
opera Opera Browser=7.51
opera Opera Browser=8.0-beta2
opera Opera Browser=9.10
opera Opera Browser=10.00-beta1
opera Opera Browser=9.50-beta2
opera Opera Browser=3.62-beta
opera Opera Browser=6.12
opera Opera Browser=10.00-beta2
opera Opera Browser=6.0-beta2
opera Opera Browser=4.00-beta4
opera Opera Browser=5.0-beta3
opera Opera Browser=6.01
opera Opera Browser=8.52
opera Opera Browser=6.06
opera Opera Browser=7.52
opera Opera Browser=7.54-update2
opera Opera Browser=3.21
opera Opera Browser=5.0-beta6
opera Opera Browser=8.01
opera Opera Browser=6.1-beta1
opera Opera Browser=2.12
opera Opera Browser=9.52
opera Opera Browser=8.0-beta1
opera Opera Browser=6.0
opera Opera Browser=7.22
opera Opera Browser=7.10-beta1
opera Opera Browser=7.0
opera Opera Browser<10.00
Event History
Sep 2, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3046?
CVE-2009-3046 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2009-3046?
To fix CVE-2009-3046, upgrade to Opera version 10.00 or later.
3
What type of vulnerability is CVE-2009-3046?
CVE-2009-3046 is an SSL certificate validation vulnerability.
4
Which versions of Opera are affected by CVE-2009-3046?
CVE-2009-3046 affects all versions of Opera prior to 10.00.
5
How does CVE-2009-3046 impact SSL certificate validation?
CVE-2009-3046 allows SSL servers to bypass certificate validation with revoked certificates.