CVE-2011-3388

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-09-06 · updated 2026-06-16
Weakness: CWE-200

Description

Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended Validation and loading content from trusted sources in an unspecified sequence that causes the address field and page information dialog to contain security information based on the trusted site, instead of the insecure site.

Affected products

Opera Browser: through 11.50; 5.0, 5.0-beta2, 5.0-beta3, 5.0-beta4, 5.0-beta5, 5.0-beta6 (+113)

References

http://osvdb.org/74828
http://secunia.com/advisories/45791
http://www.opera.com/docs/changelogs/mac/1151/
http://www.opera.com/docs/changelogs/unix/1151/
http://www.opera.com/docs/changelogs/windows/1151/
http://www.opera.com/support/kb/view/1000/
http://www.securityfocus.com/bid/49388
http://www.securitytracker.com/id?1025997
https://exchange.xforce.ibmcloud.com/vulnerabilities/69515
http://osvdb.org/74828
http://secunia.com/advisories/45791
http://www.opera.com/docs/changelogs/mac/1151/

Get alerted when CVE-2011-3388 or the next vulnerability affects your stack