Opera, possibly prior to 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle malicious users to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
opera opera browser 7.0 |
||
opera opera browser 7.23 |
||
opera opera browser 8.0 |
||
opera opera browser 8.01 |
||
opera opera browser 7.60 |
||
opera opera browser 9.10 |
||
opera opera browser 9.21 |
||
opera opera browser 9.01 |
||
opera opera browser 8.52 |
||
opera opera browser 8.54 |
||
opera opera browser 7.53 |
||
opera opera browser 8.51 |
||
opera opera browser 8.02 |
||
opera opera browser 9.12 |
||
opera opera browser |
||
opera opera browser 9.0 |
||
opera opera browser 7.54 |
||
opera opera browser 8.53 |
||
opera opera browser 8.50 |
||
opera opera browser 9.20 |
||
opera opera browser 9.02 |
Vulmon