CVE-2006-3331

Medium

Description

Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks.

SeverityMedium
CVSS5.0
Exploit probability—
ProductOpera Browser
PublishedJun 30, 2006
First seenJun 30, 2006

How to fix

Update
  • opera opera_browser9.0 or later

Affected products

ProductAffected versionsFixed in
opera opera_browserv < 9.09.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.