CVE-2010-4579

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier for remote attackers to trick users into interacting with a crafted web site that spoofs the (1) security information dialog or (2) download dialog.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published
Dec 22, 2010
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2010

CVE-2010-45805.0Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote attackers to obtain senCVE-2010-458110.0Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."CVE-2010-45825.0Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intCVE-2010-45832.6Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier for remote attackers tCVE-2010-45842.6Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites,CVE-2010-45855.0Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service (appliCVE-2010-458610.0The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, poCVE-2010-45879.3Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might make it easier for usCVE-2010-45889.3The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute CVE-2010-45894.3Cross-site scripting (XSS) vulnerability in IBM ENOVIA 6 allows remote attackers to inject arbitrary web script or HTML via vectors related CVE-2010-45904.3Cross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection Manager in IBM Lotus Mobile Connect (LMC) beforCVE-2010-45914.4The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not delete LTPA
CVE-2010-4579: Medium severity, CVSS 5.0 | Vulnix