CVE-2009-3266

Severity Score

4.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Opera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed, which allows remote attackers to conduct cross-site scripting (XSS) attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed, related to the rendering of the application/rss+xml content type as "scripted content."

El navegador Opera anterior a la versión 10.01 no restringe de manera apropiada el HTML en un (1) RSS o (2) Atom feed, que permite a los atacantes remotos realizar ataques de tipo Cross-Site Scripting (XSS), y realizar ataques de tipo cross-zone scripting, que involucran la página Feed Subscription, para leer feeds o crear subscripciones feed, por medio de un feed creado, relacionado con la representación del tipo de contenido application/rss+xml como "scripted content."

*Credits: N/A

CVSS Scores

NISTv2 4.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-09-18 CVE Reserved
2009-09-18 CVE Published
2023-12-22 EPSS Updated
2024-08-07 CVE Updated
2024-08-07 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC

References (15)

URL	Tag	Source
http://archives.neohapsis.com/archives/bugtraq/2009-10/0289.html	Mailing List
http://securethoughts.com/2009/10/hijacking-operas-native-page-using-malicious-rss-payloads	X_refsource_misc
http://www.osvdb.org/59358	Vdb Entry
http://www.securityfocus.com/archive/1/506517/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/36418	Vdb Entry
http://www.securityfocus.com/bid/36850	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/54021	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6314	Signature

URL	Date	SRC
http://securethoughts.com/2009/09/exploiting-chrome-and-operas-inbuilt-atomrss-reader-with-script-execution-and-more	2024-08-07

URL	Date	SRC
http://www.opera.com/docs/changelogs/mac/1001	2018-10-30
http://www.opera.com/docs/changelogs/unix/1001	2018-10-30
http://www.opera.com/docs/changelogs/windows/1001	2018-10-30

URL	Date	SRC
http://secunia.com/advisories/37182	2018-10-30
http://www.opera.com/support/kb/view/939	2018-10-30
http://www.vupen.com/english/advisories/2009/3073	2018-10-30

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0"		beta2		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0"		beta3		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0"		beta4		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0"		beta5		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0"		beta6		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0"		beta7		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				5.0 Search vendor "Opera" for product "Opera Browser" and version "5.0"		beta8		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				5.02 Search vendor "Opera" for product "Opera Browser" and version "5.02"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				5.10 Search vendor "Opera" for product "Opera Browser" and version "5.10"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				5.11 Search vendor "Opera" for product "Opera Browser" and version "5.11"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				5.12 Search vendor "Opera" for product "Opera Browser" and version "5.12"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.0 Search vendor "Opera" for product "Opera Browser" and version "6.0"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.0 Search vendor "Opera" for product "Opera Browser" and version "6.0"		beta1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.0 Search vendor "Opera" for product "Opera Browser" and version "6.0"		beta2		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.0 Search vendor "Opera" for product "Opera Browser" and version "6.0"		tp1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.0 Search vendor "Opera" for product "Opera Browser" and version "6.0"		tp2		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.0 Search vendor "Opera" for product "Opera Browser" and version "6.0"		tp3		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.1 Search vendor "Opera" for product "Opera Browser" and version "6.1"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.01 Search vendor "Opera" for product "Opera Browser" and version "6.01"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.1 Search vendor "Opera" for product "Opera Browser" and version "6.1"		beta1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.02 Search vendor "Opera" for product "Opera Browser" and version "6.02"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.03 Search vendor "Opera" for product "Opera Browser" and version "6.03"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.04 Search vendor "Opera" for product "Opera Browser" and version "6.04"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.05 Search vendor "Opera" for product "Opera Browser" and version "6.05"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.06 Search vendor "Opera" for product "Opera Browser" and version "6.06"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.11 Search vendor "Opera" for product "Opera Browser" and version "6.11"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				6.12 Search vendor "Opera" for product "Opera Browser" and version "6.12"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.0 Search vendor "Opera" for product "Opera Browser" and version "7.0"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.0 Search vendor "Opera" for product "Opera Browser" and version "7.0"		beta1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.0 Search vendor "Opera" for product "Opera Browser" and version "7.0"		beta1_v2		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.0 Search vendor "Opera" for product "Opera Browser" and version "7.0"		beta2		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.01 Search vendor "Opera" for product "Opera Browser" and version "7.01"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.02 Search vendor "Opera" for product "Opera Browser" and version "7.02"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.03 Search vendor "Opera" for product "Opera Browser" and version "7.03"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.10 Search vendor "Opera" for product "Opera Browser" and version "7.10"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.10 Search vendor "Opera" for product "Opera Browser" and version "7.10"		beta1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.11 Search vendor "Opera" for product "Opera Browser" and version "7.11"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.11 Search vendor "Opera" for product "Opera Browser" and version "7.11"		beta2		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.20 Search vendor "Opera" for product "Opera Browser" and version "7.20"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.20 Search vendor "Opera" for product "Opera Browser" and version "7.20"		beta7		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.21 Search vendor "Opera" for product "Opera Browser" and version "7.21"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.22 Search vendor "Opera" for product "Opera Browser" and version "7.22"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.23 Search vendor "Opera" for product "Opera Browser" and version "7.23"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.50 Search vendor "Opera" for product "Opera Browser" and version "7.50"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.50 Search vendor "Opera" for product "Opera Browser" and version "7.50"		beta1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.51 Search vendor "Opera" for product "Opera Browser" and version "7.51"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.52 Search vendor "Opera" for product "Opera Browser" and version "7.52"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.53 Search vendor "Opera" for product "Opera Browser" and version "7.53"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.54 Search vendor "Opera" for product "Opera Browser" and version "7.54"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.54 Search vendor "Opera" for product "Opera Browser" and version "7.54"		update1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.54 Search vendor "Opera" for product "Opera Browser" and version "7.54"		update2		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				7.60 Search vendor "Opera" for product "Opera Browser" and version "7.60"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				8.0 Search vendor "Opera" for product "Opera Browser" and version "8.0"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				8.0 Search vendor "Opera" for product "Opera Browser" and version "8.0"		beta1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				8.0 Search vendor "Opera" for product "Opera Browser" and version "8.0"		beta2		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				8.0 Search vendor "Opera" for product "Opera Browser" and version "8.0"		beta3		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				8.01 Search vendor "Opera" for product "Opera Browser" and version "8.01"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				8.02 Search vendor "Opera" for product "Opera Browser" and version "8.02"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				8.50 Search vendor "Opera" for product "Opera Browser" and version "8.50"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				8.51 Search vendor "Opera" for product "Opera Browser" and version "8.51"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				8.52 Search vendor "Opera" for product "Opera Browser" and version "8.52"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				8.53 Search vendor "Opera" for product "Opera Browser" and version "8.53"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				8.54 Search vendor "Opera" for product "Opera Browser" and version "8.54"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.0 Search vendor "Opera" for product "Opera Browser" and version "9.0"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.0 Search vendor "Opera" for product "Opera Browser" and version "9.0"		beta1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.0 Search vendor "Opera" for product "Opera Browser" and version "9.0"		beta2		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.01 Search vendor "Opera" for product "Opera Browser" and version "9.01"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.02 Search vendor "Opera" for product "Opera Browser" and version "9.02"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.10 Search vendor "Opera" for product "Opera Browser" and version "9.10"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.12 Search vendor "Opera" for product "Opera Browser" and version "9.12"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.20 Search vendor "Opera" for product "Opera Browser" and version "9.20"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.20 Search vendor "Opera" for product "Opera Browser" and version "9.20"		beta1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.21 Search vendor "Opera" for product "Opera Browser" and version "9.21"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.22 Search vendor "Opera" for product "Opera Browser" and version "9.22"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.23 Search vendor "Opera" for product "Opera Browser" and version "9.23"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.24 Search vendor "Opera" for product "Opera Browser" and version "9.24"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.25 Search vendor "Opera" for product "Opera Browser" and version "9.25"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.26 Search vendor "Opera" for product "Opera Browser" and version "9.26"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.27 Search vendor "Opera" for product "Opera Browser" and version "9.27"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.50 Search vendor "Opera" for product "Opera Browser" and version "9.50"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.50 Search vendor "Opera" for product "Opera Browser" and version "9.50"		beta1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.50 Search vendor "Opera" for product "Opera Browser" and version "9.50"		beta2		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.51 Search vendor "Opera" for product "Opera Browser" and version "9.51"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.52 Search vendor "Opera" for product "Opera Browser" and version "9.52"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.60 Search vendor "Opera" for product "Opera Browser" and version "9.60"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.60 Search vendor "Opera" for product "Opera Browser" and version "9.60"		beta1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.61 Search vendor "Opera" for product "Opera Browser" and version "9.61"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.62 Search vendor "Opera" for product "Opera Browser" and version "9.62"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.63 Search vendor "Opera" for product "Opera Browser" and version "9.63"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				9.64 Search vendor "Opera" for product "Opera Browser" and version "9.64"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.00 Search vendor "Opera" for product "Opera Browser" and version "10.00"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.00 Search vendor "Opera" for product "Opera Browser" and version "10.00"		beta1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.00 Search vendor "Opera" for product "Opera Browser" and version "10.00"		beta2		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.00 Search vendor "Opera" for product "Opera Browser" and version "10.00"		beta3		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.01 Search vendor "Opera" for product "Opera Browser" and version "10.01"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.10 Search vendor "Opera" for product "Opera Browser" and version "10.10"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.10 Search vendor "Opera" for product "Opera Browser" and version "10.10"		beta1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.50 Search vendor "Opera" for product "Opera Browser" and version "10.50"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.50 Search vendor "Opera" for product "Opera Browser" and version "10.50"		beta1		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.50 Search vendor "Opera" for product "Opera Browser" and version "10.50"		beta2		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.51 Search vendor "Opera" for product "Opera Browser" and version "10.51"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.52 Search vendor "Opera" for product "Opera Browser" and version "10.52"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.53 Search vendor "Opera" for product "Opera Browser" and version "10.53"		-		Affected
Opera Search vendor "Opera"		Opera Browser Search vendor "Opera" for product "Opera Browser"				10.53 Search vendor "Opera" for product "Opera Browser" and version "10.53"		b		Affected