CVE-2009-3832

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-10-30 · updated 2026-06-16
Weakness: CWE-601

Description

Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site.

Affected products

Opera Browser: before 10.01 — fixed in 10.01

How to fix

Upgrade to a fixed version: Opera Browser 10.01. Check the vendor advisory for mitigations.

References

http://secunia.com/advisories/37182
http://www.opera.com/docs/changelogs/windows/1001/
http://www.opera.com/support/kb/view/940/
http://www.osvdb.org/59359
http://www.securityfocus.com/bid/36850
http://www.vupen.com/english/advisories/2009/3073
https://exchange.xforce.ibmcloud.com/vulnerabilities/54022
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6384
http://secunia.com/advisories/37182
http://www.opera.com/docs/changelogs/windows/1001/
http://www.opera.com/support/kb/view/940/
http://www.osvdb.org/59359

Get alerted when CVE-2009-3832 or the next vulnerability affects your stack