CVE-2009-3046

HIGH 7.5CVE-2009-3046 · Published 02/09/2009 · updated 16/06/2026

In short

CVE-2009-3046 is a HIGH (CVSS 7.5) vulnerability affecting opera browser (opera).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.8% of all vulnerabilities.
Fix: update to 10.00 or later.

Package	Affected versions	Patched versions
opera browser opera	`< 10.00`	`10.00`

Description

Opera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes it easier for remote SSL servers to bypass validation of the certificate chain via a revoked certificate.

References

opera.com/docs/changelogs/freebsd/1000 · Broken Link
opera.com/docs/changelogs/linux/1000 · Broken Link
opera.com/docs/changelogs/mac/1000 · Broken Link
opera.com/docs/changelogs/solaris/1000 · Broken Link
opera.com/docs/changelogs/windows/1000 · Broken Link
opera.com/support/kb/view/929 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6357 · Broken Link

More vulnerabilities in opera browser

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

opera browser

opera

< 10.00

10.00

More vulnerabilities in opera browser

See all →