CVE-2010-2666 - CVE House
Back to Database
Status published Critical CVE-2010-2666

Opera before 10.54 on Windows and Mac OS X does...

Vulnerability Description

Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem access and directory selection, which allows user-assisted remote attackers to create or modify arbitrary files, and consequently execute arbitrary code, via widget File I/O operations.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-2666

Credits & Attribution

No credits recorded in the NVD database.

References

More from opera

View All →
CVE-2019-18624
Opera Mini for Android allows attackers to bypass intended restrictions...
Critical 9.8
CVE-2019-13607
The Opera Mini application through 16.0.14 for iOS has a...
Medium 6.1
CVE-2019-12278
Opera through 53 on Android allows Address Bar Spoofing. Characters...
Medium 4.3
CVE-2018-6608
In the WebRTC component in Opera 51.0.2830.55, after visiting a...
Medium 4.3
CVE-2018-18913
Opera before 57.0.3098.106 is vulnerable to a DLL Search Order...
High 7.8

Affected Vendor

Affected Software

opera browser
Vulnerable Versions:
0, 5.0, 5.02, 5.10, 5.11, 5.12, 6.0, 6.01, 6.02, 6.03, 6.04, 6.05, 6.06, 7.0, 7.01, 7.02, 7.03, 7.10, 7.11, 7.20, 7.21, 7.22, 7.23, 7.50, 7.51, 7.52, 7.53, 7.54, 7.60, 8.0, 8.01, 8.02, 8.50, 8.51, 8.52, 8.53, 8.54, 9.0, 9.01, 9.02, 9.10, 9.12, 9.20, 9.21, 9.22, 9.23, 9.24, 9.25, 9.26, 9.27, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63, 9.64, 10.00, 10.01, 10.10, 10.50, 10.51, 10.52

Timeline

Official Publish: July 7th, 2010
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.