CVE-2009-3266 Detail

Vendors and Products

CPE, which stands for Common Platform Enumeration, is a standardized scheme for naming hardware, software, and operating systems. CPE provides a structured naming scheme to uniquely identify and classify information technology systems, platforms, and packages based on certain attributes such as vendor, product name, version, update, edition, and language.

CVE-2009-3266

Categories

Cross-site Scripting

OWSAP

A03-Injection

EPSS

0.81%V3

Vector

Network

Published

2009-09-18
20h00 +00:00

Modified

2018-10-10
16h57 +00:00

Official links

Notifications for a CVE

Stay informed of any changes for a specific CVE.

Notifications manage

List of Notifications

Notifications for a CVE

Stay informed of any changes for a specific CVE.

Criteria applied when sending the alert: compared with the last alert sent + differences in CISA, EPSS, CVSS, CWE, Solutions, CPE.

Parameters

You can specify a title that will be retrieved in the alerts that will be sent out.

Specified here a CVE ID as CVE-2025-1234

Planning

Month

Next run calculation

Day

Weekday

Hour

Minute

Creation date

-

Last execution

-

Next execution

-

Functionality requiring a connection

This feature, which allows you to receive alerts, is only active when you are logged into your account.

CVE Descriptions

Opera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed, which allows remote attackers to conduct cross-site scripting (XSS) attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed, related to the rendering of the application/rss+xml content type as "scripted content."

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	4.3		AV:N/AC:M/Au:N/C:N/I:P/A:N	[email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Opera>>Opera_browser >> Version 5.0

Opera>>Opera_browser >> Version 5.0 (Open CPE detail)
Opera>>Opera_browser >> Version 5.0 (Open CPE detail)
Opera>>Opera_browser >> Version 5.0 (Open CPE detail)
Opera>>Opera_browser >> Version 5.0 (Open CPE detail)
Opera>>Opera_browser >> Version 5.0 (Open CPE detail)
Opera>>Opera_browser >> Version 5.0 (Open CPE detail)
Opera>>Opera_browser >> Version 5.0 (Open CPE detail)
Opera>>Opera_browser >> Version 5.0 (Open CPE detail)

Opera>>Opera_browser >> Version 5.0

Opera>>Opera_browser >> Version 5.0 (Open CPE detail)

Opera>>Opera_browser >> Version 5.0

Opera>>Opera_browser >> Version 5.0 (Open CPE detail)

Opera>>Opera_browser >> Version 5.0

Opera>>Opera_browser >> Version 5.0 (Open CPE detail)

Opera>>Opera_browser >> Version 5.0

Opera>>Opera_browser >> Version 5.0 (Open CPE detail)

Opera>>Opera_browser >> Version 5.0

Opera>>Opera_browser >> Version 5.0 (Open CPE detail)

Opera>>Opera_browser >> Version 5.0

Opera>>Opera_browser >> Version 5.0 (Open CPE detail)

Opera>>Opera_browser >> Version 5.0

Opera>>Opera_browser >> Version 5.0 (Open CPE detail)

Opera>>Opera_browser >> Version 5.02

Opera>>Opera_browser >> Version 5.02 (Open CPE detail)

Opera>>Opera_browser >> Version 5.10

Opera>>Opera_browser >> Version 5.10 (Open CPE detail)

Opera>>Opera_browser >> Version 5.11

Opera>>Opera_browser >> Version 5.11 (Open CPE detail)

Opera>>Opera_browser >> Version 5.12

Opera>>Opera_browser >> Version 5.12 (Open CPE detail)

Opera>>Opera_browser >> Version 6.0

Opera>>Opera_browser >> Version 6.0 (Open CPE detail)
Opera>>Opera_browser >> Version 6.0 (Open CPE detail)
Opera>>Opera_browser >> Version 6.0 (Open CPE detail)
Opera>>Opera_browser >> Version 6.0 (Open CPE detail)
Opera>>Opera_browser >> Version 6.0 (Open CPE detail)
Opera>>Opera_browser >> Version 6.0 (Open CPE detail)
Opera>>Opera_browser >> Version 6.0 (Open CPE detail)

Opera>>Opera_browser >> Version 6.0

Opera>>Opera_browser >> Version 6.0 (Open CPE detail)

Opera>>Opera_browser >> Version 6.0

Opera>>Opera_browser >> Version 6.0 (Open CPE detail)

Opera>>Opera_browser >> Version 6.0

Opera>>Opera_browser >> Version 6.0 (Open CPE detail)

Opera>>Opera_browser >> Version 6.0

Opera>>Opera_browser >> Version 6.0 (Open CPE detail)

Opera>>Opera_browser >> Version 6.0

Opera>>Opera_browser >> Version 6.0 (Open CPE detail)

Opera>>Opera_browser >> Version 6.1

Opera>>Opera_browser >> Version 6.1 (Open CPE detail)
Opera>>Opera_browser >> Version 6.1 (Open CPE detail)

Opera>>Opera_browser >> Version 6.01

Opera>>Opera_browser >> Version 6.01 (Open CPE detail)

Opera>>Opera_browser >> Version 6.1

Opera>>Opera_browser >> Version 6.1 (Open CPE detail)

Opera>>Opera_browser >> Version 6.02

Opera>>Opera_browser >> Version 6.02 (Open CPE detail)

Opera>>Opera_browser >> Version 6.03

Opera>>Opera_browser >> Version 6.03 (Open CPE detail)

Opera>>Opera_browser >> Version 6.04

Opera>>Opera_browser >> Version 6.04 (Open CPE detail)

Opera>>Opera_browser >> Version 6.05

Opera>>Opera_browser >> Version 6.05 (Open CPE detail)

Opera>>Opera_browser >> Version 6.06

Opera>>Opera_browser >> Version 6.06 (Open CPE detail)

Opera>>Opera_browser >> Version 6.11

Opera>>Opera_browser >> Version 6.11 (Open CPE detail)

Opera>>Opera_browser >> Version 6.12

Opera>>Opera_browser >> Version 6.12 (Open CPE detail)

Opera>>Opera_browser >> Version 7.0

Opera>>Opera_browser >> Version 7.0 (Open CPE detail)
Opera>>Opera_browser >> Version 7.0 (Open CPE detail)
Opera>>Opera_browser >> Version 7.0 (Open CPE detail)
Opera>>Opera_browser >> Version 7.0 (Open CPE detail)

Opera>>Opera_browser >> Version 7.0

Opera>>Opera_browser >> Version 7.0 (Open CPE detail)

Opera>>Opera_browser >> Version 7.0

Opera>>Opera_browser >> Version 7.0 (Open CPE detail)

Opera>>Opera_browser >> Version 7.0

Opera>>Opera_browser >> Version 7.0 (Open CPE detail)

Opera>>Opera_browser >> Version 7.01

Opera>>Opera_browser >> Version 7.01 (Open CPE detail)

Opera>>Opera_browser >> Version 7.02

Opera>>Opera_browser >> Version 7.02 (Open CPE detail)

Opera>>Opera_browser >> Version 7.03

Opera>>Opera_browser >> Version 7.03 (Open CPE detail)

Opera>>Opera_browser >> Version 7.10

Opera>>Opera_browser >> Version 7.10 (Open CPE detail)
Opera>>Opera_browser >> Version 7.10 (Open CPE detail)

Opera>>Opera_browser >> Version 7.10

Opera>>Opera_browser >> Version 7.10 (Open CPE detail)

Opera>>Opera_browser >> Version 7.11

Opera>>Opera_browser >> Version 7.11 (Open CPE detail)
Opera>>Opera_browser >> Version 7.11 (Open CPE detail)

Opera>>Opera_browser >> Version 7.11

Opera>>Opera_browser >> Version 7.11 (Open CPE detail)

Opera>>Opera_browser >> Version 7.20

Opera>>Opera_browser >> Version 7.20 (Open CPE detail)
Opera>>Opera_browser >> Version 7.20 (Open CPE detail)

Opera>>Opera_browser >> Version 7.20

Opera>>Opera_browser >> Version 7.20 (Open CPE detail)

Opera>>Opera_browser >> Version 7.21

Opera>>Opera_browser >> Version 7.21 (Open CPE detail)

Opera>>Opera_browser >> Version 7.22

Opera>>Opera_browser >> Version 7.22 (Open CPE detail)

Opera>>Opera_browser >> Version 7.23

Opera>>Opera_browser >> Version 7.23 (Open CPE detail)

Opera>>Opera_browser >> Version 7.50

Opera>>Opera_browser >> Version 7.50 (Open CPE detail)
Opera>>Opera_browser >> Version 7.50 (Open CPE detail)

Opera>>Opera_browser >> Version 7.50

Opera>>Opera_browser >> Version 7.50 (Open CPE detail)

Opera>>Opera_browser >> Version 7.51

Opera>>Opera_browser >> Version 7.51 (Open CPE detail)

Opera>>Opera_browser >> Version 7.52

Opera>>Opera_browser >> Version 7.52 (Open CPE detail)

Opera>>Opera_browser >> Version 7.53

Opera>>Opera_browser >> Version 7.53 (Open CPE detail)

Opera>>Opera_browser >> Version 7.54

Opera>>Opera_browser >> Version 7.54 (Open CPE detail)
Opera>>Opera_browser >> Version 7.54 (Open CPE detail)
Opera>>Opera_browser >> Version 7.54 (Open CPE detail)

Opera>>Opera_browser >> Version 7.54

Opera>>Opera_browser >> Version 7.54 (Open CPE detail)

Opera>>Opera_browser >> Version 7.54

Opera>>Opera_browser >> Version 7.54 (Open CPE detail)

Opera>>Opera_browser >> Version 7.60

Opera>>Opera_browser >> Version 7.60 (Open CPE detail)

Opera>>Opera_browser >> Version 8.0

Opera>>Opera_browser >> Version 8.0 (Open CPE detail)
Opera>>Opera_browser >> Version 8.0 (Open CPE detail)
Opera>>Opera_browser >> Version 8.0 (Open CPE detail)
Opera>>Opera_browser >> Version 8.0 (Open CPE detail)

Opera>>Opera_browser >> Version 8.0

Opera>>Opera_browser >> Version 8.0 (Open CPE detail)

Opera>>Opera_browser >> Version 8.0

Opera>>Opera_browser >> Version 8.0 (Open CPE detail)

Opera>>Opera_browser >> Version 8.0

Opera>>Opera_browser >> Version 8.0 (Open CPE detail)

Opera>>Opera_browser >> Version 8.01

Opera>>Opera_browser >> Version 8.01 (Open CPE detail)

Opera>>Opera_browser >> Version 8.02

Opera>>Opera_browser >> Version 8.02 (Open CPE detail)

Opera>>Opera_browser >> Version 8.50

Opera>>Opera_browser >> Version 8.50 (Open CPE detail)

Opera>>Opera_browser >> Version 8.51

Opera>>Opera_browser >> Version 8.51 (Open CPE detail)

Opera>>Opera_browser >> Version 8.52

Opera>>Opera_browser >> Version 8.52 (Open CPE detail)

Opera>>Opera_browser >> Version 8.53

Opera>>Opera_browser >> Version 8.53 (Open CPE detail)

Opera>>Opera_browser >> Version 8.54

Opera>>Opera_browser >> Version 8.54 (Open CPE detail)

Opera>>Opera_browser >> Version 9.0

Opera>>Opera_browser >> Version 9.0 (Open CPE detail)
Opera>>Opera_browser >> Version 9.0 (Open CPE detail)
Opera>>Opera_browser >> Version 9.0 (Open CPE detail)

Opera>>Opera_browser >> Version 9.0

Opera>>Opera_browser >> Version 9.0 (Open CPE detail)

Opera>>Opera_browser >> Version 9.0

Opera>>Opera_browser >> Version 9.0 (Open CPE detail)

Opera>>Opera_browser >> Version 9.01

Opera>>Opera_browser >> Version 9.01 (Open CPE detail)

Opera>>Opera_browser >> Version 9.02

Opera>>Opera_browser >> Version 9.02 (Open CPE detail)

Opera>>Opera_browser >> Version 9.10

Opera>>Opera_browser >> Version 9.10 (Open CPE detail)

Opera>>Opera_browser >> Version 9.12

Opera>>Opera_browser >> Version 9.12 (Open CPE detail)

Opera>>Opera_browser >> Version 9.20

Opera>>Opera_browser >> Version 9.20 (Open CPE detail)
Opera>>Opera_browser >> Version 9.20 (Open CPE detail)

Opera>>Opera_browser >> Version 9.20

Opera>>Opera_browser >> Version 9.20 (Open CPE detail)

Opera>>Opera_browser >> Version 9.21

Opera>>Opera_browser >> Version 9.21 (Open CPE detail)

Opera>>Opera_browser >> Version 9.22

Opera>>Opera_browser >> Version 9.22 (Open CPE detail)

Opera>>Opera_browser >> Version 9.23

Opera>>Opera_browser >> Version 9.23 (Open CPE detail)

Opera>>Opera_browser >> Version 9.24

Opera>>Opera_browser >> Version 9.24 (Open CPE detail)

Opera>>Opera_browser >> Version 9.25

Opera>>Opera_browser >> Version 9.25 (Open CPE detail)

Opera>>Opera_browser >> Version 9.26

Opera>>Opera_browser >> Version 9.26 (Open CPE detail)

Opera>>Opera_browser >> Version 9.27

Opera>>Opera_browser >> Version 9.27 (Open CPE detail)

Opera>>Opera_browser >> Version 9.50

Opera>>Opera_browser >> Version 9.50 (Open CPE detail)
Opera>>Opera_browser >> Version 9.50 (Open CPE detail)
Opera>>Opera_browser >> Version 9.50 (Open CPE detail)

Opera>>Opera_browser >> Version 9.50

Opera>>Opera_browser >> Version 9.50 (Open CPE detail)

Opera>>Opera_browser >> Version 9.50

Opera>>Opera_browser >> Version 9.50 (Open CPE detail)

Opera>>Opera_browser >> Version 9.51

Opera>>Opera_browser >> Version 9.51 (Open CPE detail)

Opera>>Opera_browser >> Version 9.52

Opera>>Opera_browser >> Version 9.52 (Open CPE detail)

Opera>>Opera_browser >> Version 9.60

Opera>>Opera_browser >> Version 9.60 (Open CPE detail)
Opera>>Opera_browser >> Version 9.60 (Open CPE detail)

Opera>>Opera_browser >> Version 9.60

Opera>>Opera_browser >> Version 9.60 (Open CPE detail)

Opera>>Opera_browser >> Version 9.61

Opera>>Opera_browser >> Version 9.61 (Open CPE detail)

Opera>>Opera_browser >> Version 9.62

Opera>>Opera_browser >> Version 9.62 (Open CPE detail)

Opera>>Opera_browser >> Version 9.63

Opera>>Opera_browser >> Version 9.63 (Open CPE detail)

Opera>>Opera_browser >> Version 9.64

Opera>>Opera_browser >> Version 9.64 (Open CPE detail)

Opera>>Opera_browser >> Version 10.00

Opera>>Opera_browser >> Version 10.00 (Open CPE detail)
Opera>>Opera_browser >> Version 10.00 (Open CPE detail)
Opera>>Opera_browser >> Version 10.00 (Open CPE detail)
Opera>>Opera_browser >> Version 10.00 (Open CPE detail)
Opera>>Opera_browser >> Version 10.00 (Open CPE detail)

Opera>>Opera_browser >> Version 10.00

Opera>>Opera_browser >> Version 10.00 (Open CPE detail)

Opera>>Opera_browser >> Version 10.00

Opera>>Opera_browser >> Version 10.00 (Open CPE detail)

Opera>>Opera_browser >> Version 10.00

Opera>>Opera_browser >> Version 10.00 (Open CPE detail)

Opera>>Opera_browser >> Version 10.01

Opera>>Opera_browser >> Version 10.01 (Open CPE detail)

Opera>>Opera_browser >> Version 10.10

Opera>>Opera_browser >> Version 10.10 (Open CPE detail)
Opera>>Opera_browser >> Version 10.10 (Open CPE detail)

Opera>>Opera_browser >> Version 10.10

Opera>>Opera_browser >> Version 10.10 (Open CPE detail)

Opera>>Opera_browser >> Version 10.50

Opera>>Opera_browser >> Version 10.50 (Open CPE detail)
Opera>>Opera_browser >> Version 10.50 (Open CPE detail)
Opera>>Opera_browser >> Version 10.50 (Open CPE detail)
Opera>>Opera_browser >> Version 10.50 (Open CPE detail)

Opera>>Opera_browser >> Version 10.50

Opera>>Opera_browser >> Version 10.50 (Open CPE detail)

Opera>>Opera_browser >> Version 10.50

Opera>>Opera_browser >> Version 10.50 (Open CPE detail)

Opera>>Opera_browser >> Version 10.51

Opera>>Opera_browser >> Version 10.51 (Open CPE detail)

Opera>>Opera_browser >> Version 10.52

Opera>>Opera_browser >> Version 10.52 (Open CPE detail)
Opera>>Opera_browser >> Version 10.52 (Open CPE detail)
Opera>>Opera_browser >> Version 10.52 (Open CPE detail)

Opera>>Opera_browser >> Version 10.53

Opera>>Opera_browser >> Version 10.53 (Open CPE detail)
Opera>>Opera_browser >> Version 10.53 (Open CPE detail)
Opera>>Opera_browser >> Version 10.53 (Open CPE detail)

Opera>>Opera_browser >> Version 10.53

Opera>>Opera_browser >> Version 10.53 (Open CPE detail)

References

http://www.opera.com/support/kb/view/939/
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2009/3073
Tags : vdb-entry, x_refsource_VUPEN

http://www.securityfocus.com/archive/1/506517/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://archives.neohapsis.com/archives/bugtraq/2009-10/0289.html
Tags : mailing-list, x_refsource_BUGTRAQ

http://securethoughts.com/2009/10/hijacking-operas-native-page-using-malicious-rss-payloads/
Tags : x_refsource_MISC

http://www.osvdb.org/59358
Tags : vdb-entry, x_refsource_OSVDB

http://www.opera.com/docs/changelogs/unix/1001/
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/37182
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/36850
Tags : vdb-entry, x_refsource_BID

http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more/
Tags : x_refsource_MISC

http://www.securityfocus.com/bid/36418
Tags : vdb-entry, x_refsource_BID

https://exchange.xforce.ibmcloud.com/vulnerabilities/54021
Tags : vdb-entry, x_refsource_XF

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6314
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.opera.com/docs/changelogs/mac/1001/
Tags : x_refsource_CONFIRM

http://www.opera.com/docs/changelogs/windows/1001/
Tags : x_refsource_CONFIRM