CVE-2009-3049

Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2009-09-02

Last modified

2024-08-07

Affected products

• Opera Browser (Opera)

References

• http://www.opera.com/docs/changelogs/freebsd/1000/
• http://www.opera.com/docs/changelogs/linux/1000/
• http://www.opera.com/docs/changelogs/mac/1000/
• http://www.opera.com/docs/changelogs/solaris/1000/
• http://www.opera.com/docs/changelogs/windows/1000/
• http://www.opera.com/support/kb/view/932/
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6235