CVE-2009-2063

中危 6.8CVE-2009-2063 · Published 15/06/2009 · updated 16/06/2026

要点

CVE-2009-2063 是影响 opera browser (opera) 的中危 (CVSS 6.8)漏洞。
未来 30 天内被利用的概率（EPSS）：1.4%，高于 72.8% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
opera browser opera	`= 1.00= 2.00= 2.10= 2.12= 3.00= 3.10= 3.21= 3.50= 3.51= 3.60= 3.61= 3.62= 4.00= 4.01= 4.02= 5.0= 5.02= 5.10= 5.11= 5.12= 6.0= 6.01= 6.02= 6.03= 6.04= 6.05= 6.06= 6.1= 6.11= 6.12= 7.0= 7.01= 7.02= 7.03= 7.10= 7.11= 7.20= 7.21= 7.22= 7.23= 7.50= 7.51= 7.52= 7.53= 7.54= 7.60= 8.0= 8.01= 8.02= 8.50= 8.51= 8.52= 8.53= 8.54= 9.0= 9.01= 9.02= 9.10= 9.12= 9.20= 9.21= 9.22= 9.23≤ 9.24`	No fix yet

Description

Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.

References

opera browser 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

opera browser

opera

= 1.00= 2.00= 2.10= 2.12= 3.00= 3.10= 3.21= 3.50= 3.51= 3.60= 3.61= 3.62= 4.00= 4.01= 4.02= 5.0= 5.02= 5.10= 5.11= 5.12= 6.0= 6.01= 6.02= 6.03= 6.04= 6.05= 6.06= 6.1= 6.11= 6.12= 7.0= 7.01= 7.02= 7.03= 7.10= 7.11= 7.20= 7.21= 7.22= 7.23= 7.50= 7.51= 7.52= 7.53= 7.54= 7.60= 8.0= 8.01= 8.02= 8.50= 8.51= 8.52= 8.53= 8.54= 9.0= 9.01= 9.02= 9.10= 9.12= 9.20= 9.21= 9.22= 9.23≤ 9.24

No fix yet

opera browser 的其他漏洞

查看全部 →