CVE-2010-4579

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier for remote attackers to trick users into interacting with a crafted web site that spoofs the (1) security information dialog or (2) download dialog.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Dec 22, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-45805.0Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote attackers to obtain sen CVE-2010-458110.0Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."CVE-2010-45825.0Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass int CVE-2010-45832.6Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier for remote attackers t CVE-2010-45842.6Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites,CVE-2010-45855.0Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service (appli CVE-2010-458610.0The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, po CVE-2010-45879.3Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might make it easier for us CVE-2010-45889.3The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute CVE-2010-45894.3Cross-site scripting (XSS) vulnerability in IBM ENOVIA 6 allows remote attackers to inject arbitrary web script or HTML via vectors related CVE-2010-45904.3Cross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection Manager in IBM Lotus Mobile Connect (LMC) befor CVE-2010-45914.4The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not delete LTPA