CVE-2010-2665: XSS
Published Jul 7, 2010
·Updated
Cross-site scripting (XSS) vulnerability in Opera before 10.54 on Windows and Mac OS X, and before 10.11 on UNIX platforms, allows remote attackers to inject arbitrary web script or HTML via a data: URI, related to incorrect detection of the "opening site."
Affected Software
110 affected components
Opera Opera Browser<=10.53
Opera Opera Browser=5.0
Opera Opera Browser=5.0-beta2
Opera Opera Browser=5.0-beta3
Opera Opera Browser=5.0-beta4
Opera Opera Browser=5.0-beta5
Opera Opera Browser=5.0-beta6
Opera Opera Browser=5.0-beta7
Opera Opera Browser=5.0-beta8
Opera Opera Browser=5.02
Opera Opera Browser=5.10
Opera Opera Browser=5.11
Opera Opera Browser=5.12
Opera Opera Browser=6.0
Opera Opera Browser=6.0-beta1
Opera Opera Browser=6.0-beta2
Opera Opera Browser=6.0-tp1
Opera Opera Browser=6.0-tp2
Opera Opera Browser=6.0-tp3
Opera Opera Browser=6.01
Opera Opera Browser=6.02
Opera Opera Browser=6.03
Opera Opera Browser=6.04
Opera Opera Browser=6.05
Opera Opera Browser=6.06
Opera Opera Browser=7.0
Opera Opera Browser=7.0-beta1
Opera Opera Browser=7.0-beta1_v2
Opera Opera Browser=7.0-beta2
Opera Opera Browser=7.01
Opera Opera Browser=7.02
Opera Opera Browser=7.03
Opera Opera Browser=7.10
Opera Opera Browser=7.10-beta1
Opera Opera Browser=7.11
Opera Opera Browser=7.11-beta2
Opera Opera Browser=7.20
Opera Opera Browser=7.20-beta7
Opera Opera Browser=7.21
Opera Opera Browser=7.22
Opera Opera Browser=7.23
Opera Opera Browser=7.50
Opera Opera Browser=7.50-beta1
Opera Opera Browser=7.51
Opera Opera Browser=7.52
Opera Opera Browser=7.53
Opera Opera Browser=7.54
Opera Opera Browser=7.54-update1
Opera Opera Browser=7.54-update2
Opera Opera Browser=7.60
Opera Opera Browser=8.0
Opera Opera Browser=8.0-beta1
Opera Opera Browser=8.0-beta2
Opera Opera Browser=8.0-beta3
Opera Opera Browser=8.01
Opera Opera Browser=8.02
Opera Opera Browser=8.50
Opera Opera Browser=8.51
Opera Opera Browser=8.52
Opera Opera Browser=8.53
Opera Opera Browser=8.54
Opera Opera Browser=9.0
Opera Opera Browser=9.0-beta1
Opera Opera Browser=9.0-beta2
Opera Opera Browser=9.01
Opera Opera Browser=9.02
Opera Opera Browser=9.10
Opera Opera Browser=9.12
Opera Opera Browser=9.20
Opera Opera Browser=9.20-beta1
Opera Opera Browser=9.21
Opera Opera Browser=9.22
Opera Opera Browser=9.23
Opera Opera Browser=9.24
Opera Opera Browser=9.25
Opera Opera Browser=9.26
Opera Opera Browser=9.27
Opera Opera Browser=9.50
Opera Opera Browser=9.50-beta1
Opera Opera Browser=9.50-beta2
Opera Opera Browser=9.51
Opera Opera Browser=9.52
Opera Opera Browser=9.60
Opera Opera Browser=9.60-beta1
Opera Opera Browser=9.61
Opera Opera Browser=9.62
Opera Opera Browser=9.63
Opera Opera Browser=9.64
Opera Opera Browser=10.00
Opera Opera Browser=10.00-beta1
Opera Opera Browser=10.00-beta2
Opera Opera Browser=10.00-beta3
Opera Opera Browser=10.01
Opera Opera Browser=10.10
Opera Opera Browser=10.10-beta1
Opera Opera Browser=10.50
Opera Opera Browser=10.50-beta1
Opera Opera Browser=10.51
Opera Opera Browser=10.52
Microsoft Windows
Opera Opera Browser=6.0-beta3
Opera Opera Browser=10.52-beta1
Opera Opera Browser=10.52-beta2
Apple iOS and macOS
Opera Opera Browser<=10.10
Opera Opera Browser=6.1
Opera Opera Browser=6.1-beta1
Opera Opera Browser=6.11
Opera Opera Browser=6.12
Unix Unix
Remediation
Patch Available
Event History
Jul 7, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Jul 8, 2010
Data Sourced
12:54 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-2665?
CVE-2010-2665 is considered a high severity vulnerability due to its potential for exploitation via cross-site scripting.
2
How do I fix CVE-2010-2665?
To fix CVE-2010-2665, upgrade Opera browser to version 10.54 or later.
3
Which versions of Opera are affected by CVE-2010-2665?
CVE-2010-2665 affects Opera versions before 10.54 on Windows and Mac OS X, and before 10.11 on UNIX platforms.
4
What type of vulnerability is CVE-2010-2665?
CVE-2010-2665 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2010-2665 be exploited without user interaction?
Yes, CVE-2010-2665 can be exploited remotely, allowing attackers to inject arbitrary web scripts without user interaction.