Unrated severityNVD Advisory· Published Jun 15, 2009· Updated Jun 16, 2026

CVE-2009-2070

Description

Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.

Affected products

Opera/Opera Browser
cpe:2.3:a:opera:opera_browser:-:*:*:*:*:*:*:*
Opera/Operallm-fuzzy

Patches

Vulnerability mechanics

References

research.microsoft.com/apps/pubs/default.aspxnvd
research.microsoft.com/pubs/79323/pbp-final-with-update.pdfnvd
www.securityfocus.com/bid/35411nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000