CVE-2009-3831

Opera before 10.01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted domain name.

• CWE-787

• http://secunia.com/advisories/37182Broken Link
• http://www.opera.com/docs/changelogs/mac/1001/Broken Link, Vendor Advisory
• http://www.opera.com/docs/changelogs/unix/1001/Broken Link, Vendor Advisory
• http://www.opera.com/docs/changelogs/windows/1001/Broken Link, Vendor Advisory
• http://www.opera.com/support/kb/view/938/Broken Link, Vendor Advisory
• http://www.osvdb.org/59357Broken Link
• http://www.securityfocus.com/bid/36850Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2009/3073Broken Link, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54020Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6574Tool Signature
• http://secunia.com/advisories/37182Broken Link
• http://www.opera.com/docs/changelogs/mac/1001/Broken Link, Vendor Advisory
• http://www.opera.com/docs/changelogs/unix/1001/Broken Link, Vendor Advisory
• http://www.opera.com/docs/changelogs/windows/1001/Broken Link, Vendor Advisory
• http://www.opera.com/support/kb/view/938/Broken Link, Vendor Advisory
• http://www.osvdb.org/59357Broken Link
• http://www.securityfocus.com/bid/36850Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2009/3073Broken Link, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54020Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6574Tool Signature

Published

Oct 30, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-3824Directory traversal vulnerability in include/processor.php i…
• CVE-2009-3825Multiple directory traversal vulnerabilities in GenCMS 2006 …
• CVE-2009-3826Multiple buffer overflows in squidGuard 1.4 allow remote att…
• CVE-2009-3828The web interface for Everfocus EDR1600 DVR allows remote at…
• CVE-2009-3829Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 …
• CVE-2009-3830The download functionality in Team Services in Microsoft Off…
• CVE-2009-3832Opera before 10.01 on Windows does not prevent use of Web fo…
• CVE-2009-3833Cross-site scripting (XSS) vulnerability in index.php in TFT…
• CVE-2009-3834SQL injection vulnerability in the Photoblog (com_photoblog)…
• CVE-2009-3835SQL injection vulnerability in the JShop (com_jshop) compone…
• CVE-2009-3836ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS …
• CVE-2009-3837Stack-based buffer overflow in Eureka Email 2.2q allows remo…