CVE-2010-4582

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published: Dec 22, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-45832.6Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier for remote attackers t CVE-2010-45842.6Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites,CVE-2010-45855.0Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service (appli CVE-2010-458610.0The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, po CVE-2010-45879.3Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might make it easier for us CVE-2010-45889.3The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute CVE-2010-45894.3Cross-site scripting (XSS) vulnerability in IBM ENOVIA 6 allows remote attackers to inject arbitrary web script or HTML via vectors related CVE-2010-45904.3Cross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection Manager in IBM Lotus Mobile Connect (LMC) befor CVE-2010-45914.4The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not delete LTPA CVE-2010-45924.3The Mobile Network Connections functionality in the Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (CVE-2010-45934.0The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a certain reference count, which allows remote au CVE-2010-45944.3The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly process T