CVE-2009-3049
Opera before 10.00 does not properly display all characters in Internationalized Domain Names ...
Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode.
Exploit likelihood
What each source reports
NVD Score used
Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode.
- Record
CVE-2009-3049- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode.
- Record
CVE-2009-3049- Updated
- 2026-11-02
EUVDEUVD-2009-3033 No score
Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode.
- Record
EUVD-2009-3033- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ch49-j2xq-99mr No score
Opera before 10.00 does not properly display all characters in Internationalized Domain Names ...
Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode.
- Record
GHSA-ch49-j2xq-99mr- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3049 is a medium vulnerability (CVSS 5.0) in Opera Browser, published September 2, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.22%, the 82nd percentile. No source names a fixed version.
References
opera.com/docs/changelogs/freebsd/1000
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6235
nvd.nist.gov/vuln/detail/CVE-2009-3049
github.com/advisories/GHSA-ch49-j2xq-99mr