CVE-2002-0270 - CVE House
Back to Database
Status published Medium CVE-2002-0270

Opera, when configured with the "Determine action by MIME type"...

Vulnerability Description

Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-0270

Credits & Attribution

No credits recorded in the NVD database.

References

More from opera software

View All →
CVE-2002-2414
Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does...
Medium 4.3
CVE-2002-2358
Cross-site scripting (XSS) vulnerability in the FTP view feature in...
Medium 4.3
CVE-2002-2332
Buffer overflow in Opera 6.01 allows remote attackers to cause...
Medium 5
CVE-2002-2312
Opera 6.0.1 allows remote attackers to upload arbitrary file contents...
Medium 5.8
CVE-2002-0898
Opera 6.0.1 and 6.0.2 allows a remote web site to...
Medium 5

Affected Vendor

opera software

View all reports →

Affected Software

opera web browser
Vulnerable Versions:
9.10

Timeline

Official Publish: May 3rd, 2002
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.