CVE-2009-3047: Medium severity opera vulnerability
Published Sep 2, 2009
·Updated
Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the currently visited site, which might allow remote attackers to spoof URLs.
Affected Software
25 affected components
opera Opera Browser=7.23
opera Opera Browser=9.02
opera Opera Browser=7.53
opera Opera Browser=8.50
opera Opera Browser=9.51
opera Opera Browser=8.53
opera Opera Browser=9.12
opera Opera Browser=8.0
opera Opera Browser=8.54
opera Opera Browser=8.02
opera Opera Browser=9.20
opera Opera Browser=9.21
opera Opera Browser=8.51
opera Opera Browser=9.64
opera Opera Browser=7.60
opera Opera Browser=7.54
opera Opera Browser=9.22
opera Opera Browser=9.01
opera Opera Browser=9.0
opera Opera Browser=9.10
opera Opera Browser<=10.00
opera Opera Browser=8.52
opera Opera Browser=8.01
opera Opera Browser=9.52
opera Opera Browser=7.0
Event History
Sep 2, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3047?
CVE-2009-3047 is considered a medium severity vulnerability due to its potential for URL spoofing.
2
How do I fix CVE-2009-3047?
To fix CVE-2009-3047, update your Opera browser to version 10.00 or later.
3
What does CVE-2009-3047 affect?
CVE-2009-3047 affects various versions of the Opera browser prior to version 10.00.
4
What type of vulnerability is CVE-2009-3047?
CVE-2009-3047 is a URL spoofing vulnerability caused by a failure to update the domain name in the address bar.
5
Can CVE-2009-3047 be exploited remotely?
Yes, CVE-2009-3047 can be exploited remotely by attackers to spoof URLs during browsing.