Login Request a demo
Unscored severity · published Sep 6, 2011
CVE-2011-3388
Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended Validation and loading content from…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended Validation and loading content from trusted sources in an unspecified sequence that causes the address field and page information dialog to contain security information based on the trusted site, instead of the insecure site.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OB
Opera Browser · Opera
through 11.50; 5.0; 5.0; 5.0; 5.0; 5.0; +34 more · source: NVD
Affected product
OB
Opera Browser
Opera
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3388
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3388
osvdb.org
http://osvdb.org/74828
Vendor Advisory
http://secunia.com/advisories/45791
www.opera.com
http://www.opera.com/docs/changelogs/mac/1151/
www.opera.com
http://www.opera.com/docs/changelogs/unix/1151/
www.opera.com
http://www.opera.com/docs/changelogs/windows/1151/
Vendor Advisory
http://www.opera.com/support/kb/view/1000/
More from Opera Browser
8.8
CVE-2008-4197
Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which…
7.8
CVE-2018-18913
Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the…
7.5
CVE-2009-3046
Opera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes it easier for remote SSL servers to bypass validation of the certificate chain…
6.1
CVE-2016-4075
Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL
6.1
CVE-2016-6908
Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order in Opera 37.0.2192.105088 for Android, due to mishandling of several unicode…