CVE-2011-2628

high · 10

Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to page unload.

CVSS

13.4%

EPSS (exploit prob.)

96th

EPSS percentile

2011-07-01

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-20

Affected products

Vendor	Product	Affected versions
opera	opera_browser	<= 11.10
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.0
opera	opera_browser	5.02
opera	opera_browser	5.10
opera	opera_browser	5.11
opera	opera_browser	5.12
opera	opera_browser	6.0
opera	opera_browser	6.0
opera	opera_browser	6.0
opera	opera_browser	6.0
opera	opera_browser	6.0
opera	opera_browser	6.0
opera	opera_browser	6.1
opera	opera_browser	6.01
opera	opera_browser	6.1
opera	opera_browser	6.02
opera	opera_browser	6.03
opera	opera_browser	6.04
opera	opera_browser	6.05
opera	opera_browser	6.06
opera	opera_browser	6.11
opera	opera_browser	6.12
opera	opera_browser	7.0
opera	opera_browser	7.0
opera	opera_browser	7.0
opera	opera_browser	7.0
opera	opera_browser	7.01
opera	opera_browser	7.02
opera	opera_browser	7.03
opera	opera_browser	7.10
opera	opera_browser	7.10
opera	opera_browser	7.11
opera	opera_browser	7.11

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-2628