CVE-2010-4046 — Sensitive Information Exposure in Browser

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.8%
top 26.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Opera Browser
Timeline
PublishedOct 21
Latest updateMay 17

Description

Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensitive information by using a video stream as HTML5 canvas content.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDopera/opera_browser10.62+70

🔴Vulnerability Details

2
GHSA
GHSA-6g97-5mc3-vqqj: Opera before 10↗2022-05-17
▶
CVEList
CVE-2010-4046: Opera before 10↗2010-10-21
▶
CVE-2010-4046 — Sensitive Information Exposure | cvebase