CVE-2010-3020: Medium severity opera Opera Browser vulnerability
Published Aug 16, 2010
·Updated
The news-feed preview feature in Opera before 10.61 does not properly remove scripts, which allows remote attackers to force subscriptions to arbitrary feeds via crafted content.
Affected Software
136 affected components
opera Opera Browser=4.01
opera Opera Browser=7.01
opera Opera Browser=9.27
opera Opera Browser=7.23
opera Opera Browser=2.10
opera Opera Browser=9.50-beta1
opera Opera Browser=9.02
opera Opera Browser=2.10-beta2
opera Opera Browser=7.03
opera Opera Browser=10.10
opera Opera Browser=7.53
opera Opera Browser=4.00-beta6
opera Opera Browser=8.50
opera Opera Browser=9.50
opera Opera Browser=9.24
opera Opera Browser=4.00-beta3
opera Opera Browser=5.0-beta2
opera Opera Browser=5.11
opera Opera Browser=3.51
opera Opera Browser=9.63
opera Opera Browser=6.1
opera Opera Browser=7.20
opera Opera Browser=6.02
opera Opera Browser=2.00
opera Opera Browser=9.51
opera Opera Browser=5.02
opera Opera Browser=1.00
opera Opera Browser=10.00
opera Opera Browser=9.26
opera Opera Browser=10.50
opera Opera Browser=5.10
opera Opera Browser=8.53
opera Opera Browser=9.12
opera Opera Browser=7.11-beta2
opera Opera Browser=8.0
opera Opera Browser=4.00
opera Opera Browser=2.10-beta1
opera Opera Browser=10.00-beta3
opera Opera Browser=6.04
opera Opera Browser=8.54
opera Opera Browser=6.11
opera Opera Browser=5.0-beta4
opera Opera Browser=6.05
opera Opera Browser=8.02
opera Opera Browser=9.20
opera Opera Browser=7.50-beta1
opera Opera Browser=3.10
opera Opera Browser=5.12
opera Opera Browser=4.02
opera Opera Browser=9.21
opera Opera Browser=10.20-alpha
opera Opera Browser=7.10
opera Opera Browser=9.0-beta1
opera Opera Browser=6.0-tp3
opera Opera Browser=3.50
opera Opera Browser=9.23
opera Opera Browser=6.0-tp1
opera Opera Browser=8.0-beta3
opera Opera Browser=3.61
opera Opera Browser=10.60-beta1
opera Opera Browser=5.0-beta8
opera Opera Browser<=10.60
opera Opera Browser=10.52
opera Opera Browser=10.51
opera Opera Browser=9.60
opera Opera Browser=7.0-beta1_v2
opera Opera Browser=10.54
opera Opera Browser=3.00-beta
opera Opera Browser=8.51
opera Opera Browser=5.0-beta5
opera Opera Browser=4.00-beta5
opera Opera Browser=7.50
opera Opera Browser=7.02
opera Opera Browser=7.21
opera Opera Browser=6.0-tp2
opera Opera Browser=5.0-beta7
opera Opera Browser=10.11
opera Opera Browser=10.50-beta1
opera Opera Browser=7.20-beta7
opera Opera Browser=7.54-update1
opera Opera Browser=9.64
opera Opera Browser=9.20-beta1
opera Opera Browser=10.53
opera Opera Browser=7.60
opera Opera Browser=7.11
opera Opera Browser=7.0-beta2
opera Opera Browser=4.00-beta2
opera Opera Browser=7.54
opera Opera Browser=9.0-beta2
opera Opera Browser=10.00-alpha
opera Opera Browser=6.03
opera Opera Browser=3.00
opera Opera Browser=7.0-beta1
opera Opera Browser=9.22
opera Opera Browser=6.0-beta1
opera Opera Browser=3.62
opera Opera Browser=2.10-beta3
opera Opera Browser=9.01
opera Opera Browser=9.0
opera Opera Browser=3.60
opera Opera Browser=5.0
opera Opera Browser=9.25
opera Opera Browser=7.51
opera Opera Browser=8.0-beta2
opera Opera Browser=9.10
opera Opera Browser=10.00-beta1
opera Opera Browser=9.50-beta2
opera Opera Browser=3.62-beta
opera Opera Browser=6.12
opera Opera Browser=9.60-beta1
opera Opera Browser=9.62
opera Opera Browser=10.00-beta2
opera Opera Browser=6.0-beta2
opera Opera Browser=4.00-beta4
opera Opera Browser=5.0-beta3
opera Opera Browser=6.01
opera Opera Browser=8.52
opera Opera Browser=10.50-beta2
opera Opera Browser=6.06
opera Opera Browser=7.52
opera Opera Browser=10.60-alpha
opera Opera Browser=7.54-update2
opera Opera Browser=3.21
opera Opera Browser=5.0-beta6
opera Opera Browser=8.01
opera Opera Browser=6.1-beta1
opera Opera Browser=10.10-beta1
opera Opera Browser=9.61
opera Opera Browser=2.12
opera Opera Browser=10.01
opera Opera Browser=9.52
opera Opera Browser=8.0-beta1
opera Opera Browser=6.0
opera Opera Browser=7.22
opera Opera Browser=7.10-beta1
opera Opera Browser=7.0
Event History
Aug 16, 2010
CVE Published
via MITRE·06:25 PM
Data Sourced
via MITRE·06:25 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3020?
CVE-2010-3020 has a severity level classified as medium due to its potential to exploit the news-feed feature.
2
How do I fix CVE-2010-3020?
To fix CVE-2010-3020, upgrade to Opera version 10.61 or later.
3
What systems are affected by CVE-2010-3020?
CVE-2010-3020 affects Opera versions prior to 10.61 across multiple operating systems.
4
What type of vulnerability is CVE-2010-3020?
CVE-2010-3020 is a cross-site scripting vulnerability that compromises the feed subscription functionality.
5
Can CVE-2010-3020 allow remote attacks?
Yes, CVE-2010-3020 can allow remote attackers to force subscriptions to arbitrary feeds through crafted content.