Arbitrary code execution vulnerability in Opera BrowserID: oval:org.secpod.oval:def:78333 | Date: (C)2022-03-23 (M)2022-10-10 |
Class: VULNERABILITY | Family: windows |
The host is installed with Opera before 9.22 and is prone to an arbitrary code execution vulnerability. A flaw is present in the application, which fails to handle a issues in http content in https web pages. Successful exploitation could allow man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.".
Platform: |
Microsoft Windows 11 |
Microsoft Windows Server 2022 |
Microsoft Windows 8.1 |
Microsoft Windows 10 |
Microsoft Windows Server 2012 R2 |
Microsoft Windows Server 2008 |
Microsoft Windows 7 |
Microsoft Windows Server 2008 R2 |
Microsoft Windows Server 2012 |
Microsoft Windows Server 2016 |
Microsoft Windows Server 2019 |