CVE-2010-2576: Code Injection
Published Aug 16, 2010
·Updated
Opera before 10.61 does not properly suppress clicks on download dialogs that became visible after a recent tab change, which allows remote attackers to conduct clickjacking attacks, and consequently execute arbitrary code, via vectors involving (1) closing a tab or (2) hiding a tab, a related issue to CVE-2005-2407.
Affected Software
136 affected components
opera Opera Browser=4.01
opera Opera Browser=7.01
opera Opera Browser=9.27
opera Opera Browser=7.23
opera Opera Browser=2.10
opera Opera Browser=9.50-beta1
opera Opera Browser=9.02
opera Opera Browser=2.10-beta2
opera Opera Browser=7.03
opera Opera Browser=10.10
opera Opera Browser=7.53
opera Opera Browser=4.00-beta6
opera Opera Browser=8.50
opera Opera Browser=9.50
opera Opera Browser=9.24
opera Opera Browser=4.00-beta3
opera Opera Browser=5.0-beta2
opera Opera Browser=5.11
opera Opera Browser=3.51
opera Opera Browser=9.63
opera Opera Browser=6.1
opera Opera Browser=7.20
opera Opera Browser=6.02
opera Opera Browser=2.00
opera Opera Browser=9.51
opera Opera Browser=5.02
opera Opera Browser=1.00
opera Opera Browser=10.00
opera Opera Browser=9.26
opera Opera Browser=10.50
opera Opera Browser=5.10
opera Opera Browser=8.53
opera Opera Browser=9.12
opera Opera Browser=7.11-beta2
opera Opera Browser=8.0
opera Opera Browser=4.00
opera Opera Browser=2.10-beta1
opera Opera Browser=10.00-beta3
opera Opera Browser=6.04
opera Opera Browser=8.54
opera Opera Browser=6.11
opera Opera Browser=5.0-beta4
opera Opera Browser=6.05
opera Opera Browser=8.02
opera Opera Browser=9.20
opera Opera Browser=7.50-beta1
opera Opera Browser=3.10
opera Opera Browser=5.12
opera Opera Browser=4.02
opera Opera Browser=9.21
opera Opera Browser=10.20-alpha
opera Opera Browser=7.10
opera Opera Browser=9.0-beta1
opera Opera Browser=6.0-tp3
opera Opera Browser=3.50
opera Opera Browser=9.23
opera Opera Browser=6.0-tp1
opera Opera Browser=8.0-beta3
opera Opera Browser=3.61
opera Opera Browser=10.60-beta1
opera Opera Browser=5.0-beta8
opera Opera Browser<=10.60
opera Opera Browser=10.52
opera Opera Browser=10.51
opera Opera Browser=9.60
opera Opera Browser=7.0-beta1_v2
opera Opera Browser=10.54
opera Opera Browser=3.00-beta
opera Opera Browser=8.51
opera Opera Browser=5.0-beta5
opera Opera Browser=4.00-beta5
opera Opera Browser=7.50
opera Opera Browser=7.02
opera Opera Browser=7.21
opera Opera Browser=6.0-tp2
opera Opera Browser=5.0-beta7
opera Opera Browser=10.11
opera Opera Browser=10.50-beta1
opera Opera Browser=7.20-beta7
opera Opera Browser=7.54-update1
opera Opera Browser=9.64
opera Opera Browser=9.20-beta1
opera Opera Browser=10.53
opera Opera Browser=7.60
opera Opera Browser=7.11
opera Opera Browser=7.0-beta2
opera Opera Browser=4.00-beta2
opera Opera Browser=7.54
opera Opera Browser=9.0-beta2
opera Opera Browser=10.00-alpha
opera Opera Browser=6.03
opera Opera Browser=3.00
opera Opera Browser=7.0-beta1
opera Opera Browser=9.22
opera Opera Browser=6.0-beta1
opera Opera Browser=3.62
opera Opera Browser=2.10-beta3
opera Opera Browser=9.01
opera Opera Browser=9.0
opera Opera Browser=3.60
opera Opera Browser=5.0
opera Opera Browser=9.25
opera Opera Browser=7.51
opera Opera Browser=8.0-beta2
opera Opera Browser=9.10
opera Opera Browser=10.00-beta1
opera Opera Browser=9.50-beta2
opera Opera Browser=3.62-beta
opera Opera Browser=6.12
opera Opera Browser=9.60-beta1
opera Opera Browser=9.62
opera Opera Browser=10.00-beta2
opera Opera Browser=6.0-beta2
opera Opera Browser=4.00-beta4
opera Opera Browser=5.0-beta3
opera Opera Browser=6.01
opera Opera Browser=8.52
opera Opera Browser=10.50-beta2
opera Opera Browser=6.06
opera Opera Browser=7.52
opera Opera Browser=10.60-alpha
opera Opera Browser=7.54-update2
opera Opera Browser=3.21
opera Opera Browser=5.0-beta6
opera Opera Browser=8.01
opera Opera Browser=6.1-beta1
opera Opera Browser=10.10-beta1
opera Opera Browser=9.61
opera Opera Browser=2.12
opera Opera Browser=10.01
opera Opera Browser=9.52
opera Opera Browser=8.0-beta1
opera Opera Browser=6.0
opera Opera Browser=7.22
opera Opera Browser=7.10-beta1
opera Opera Browser=7.0
Event History
Aug 16, 2010
CVE Published
via MITRE·06:25 PM
Data Sourced
via MITRE·06:25 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-2576?
CVE-2010-2576 has been classified as a moderately severe vulnerability, as it allows for potential clickjacking attacks that could execute arbitrary code.
2
How do I fix CVE-2010-2576?
To fix CVE-2010-2576, users should update their Opera browser to version 10.61 or later.
3
What versions of Opera are affected by CVE-2010-2576?
CVE-2010-2576 affects Opera browsers before version 10.61, including multiple earlier versions across the 1.x to 10.x range.
4
What kind of attacks can be executed through CVE-2010-2576?
CVE-2010-2576 can be exploited to conduct clickjacking attacks, allowing an attacker to trick users into clicking on hidden elements on a web page.
5
Is there a workaround for CVE-2010-2576?
There is no specific workaround for CVE-2010-2576 other than updating the browser, as the vulnerability exploits tab interaction.