Summary
The host is installed with Opera and is prone to multiple information disclosure vulnerabilities.
Impact
Successful exploitation will allow remote attackers to gain sensitive information about visited web pages by calling getComputedStyle method or via a crafted HTML document.
Impact Level: Application
Solution
No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore.
General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one.
Insight
Multiple flaws are due to an implementation erros in, - The JavaScript failing to restrict the set of values contained in the object returned by the getComputedStyle method.
- The Cascading Style Sheets (CSS) failing to handle the visited pseudo-class.
Affected
Opera version 10.50 on Linux
References
Severity
Classification
-
CVE CVE-2010-5068, CVE-2010-5072 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related Vulnerabilities