Information disclosure in Opera Browser

CVE-2010-0653

Opera before 10.10 permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.

Vulnerability class: Information Disclosure

EPSS: 0.018 (76.6th percentile) — read the EPSS interpretation.

Affected products

Opera Opera_browser
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (vendor-advisory, x_refsource_SUSE)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_MISC)