Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might make it easier for user-assisted remote attackers to have an unspecified impact via a crafted module.

The remote host is running the Opera web browser.

Versions of Opera earlier than 11.00 are potentially affected by multiple vulnerabilities :

  - An error exists such that web page content can be displayed over dialog boxes leading to security warning misrepresentation. (977)

  - An error exists such that WAP form contents can be leaded to third-party sites. (979)

  - Two unspecified, high-severity vulnerabilities exists.

The version of Opera installed on the remote host is earlier than 11.00.  Such versions are potentially affected by the following issues :

  - An error exists such that web page content can be     displayed over dialog boxes leading to security     warning misrepresentation. (977, CVE-2010-4579)

  - An error exists such that WAP form contents can be     leaked to third-party sites. (979, CVE-2010-4580)

  - An unspecified high severity issue with unknown     impact exists. (CVE-2010-4581)

  - An error exists in the handling of security policies     during extension updates. (CVE-2010-4582)

  - An error exists when 'Opera Turbo' is enabled that     does not display a page's security information     correctly. (CVE-2010-4583)

  - An error exists when viewing sites over HTTPS such that     problems with X.509 certificates are not displayed     properly. (CVE-2010-4584)

  - An error exists in the automatic update functionality     that allows an attacker to cause a denial of service     by crashing the application. (CVE-2010-4585)

  - The 'WebSockets' implementation contains unspecified     errors with unknown impact. (CVE-2010-4586)

  - An error exists in the implementation of the 'Insecure     Third Party Module' warning messages that results in an     unspecified vulnerability. (CVE-2010-4587)

ID	Name	Product	Family	Severity
800850	Opera < 11.00 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
5735	Opera < 11.00 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
51343	Opera < 11 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2010-4587

critical

Tenable Plugins

high

medium

high