CVE-2010-2660

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-07-08 · updated 2026-06-16
Weakness: CWE-264

Description

Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters.

Affected products

Opera Browser: through 10.53; through 10.60; 5.0, 5.0-beta2, 5.0-beta3, 5.0-beta4, 5.0-beta5, 5.0-beta6 (+101)

References

http://secunia.com/advisories/40250
http://www.opera.com/docs/changelogs/mac/1054/
http://www.opera.com/docs/changelogs/unix/1060/
http://www.opera.com/docs/changelogs/windows/1054/
http://www.opera.com/support/search/view/961/
http://www.securityfocus.com/bid/40973
http://www.vupen.com/english/advisories/2010/1529
http://www.vupen.com/english/advisories/2010/1673
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11603
http://secunia.com/advisories/40250
http://www.opera.com/docs/changelogs/mac/1054/
http://www.opera.com/docs/changelogs/unix/1060/

Get alerted when CVE-2010-2660 or the next vulnerability affects your stack