CVE-2009-2063

Name of the Vulnerable Software and Affected Versions Opera versions prior to 9.25

Description The issue allows man-in-the-middle attackers to execute arbitrary web script in an https site's context. This is achieved by modifying a 3xx HTTP CONNECT response to specify a 302 redirect to an arbitrary https web site, before a successful SSL handshake.

Recommendations For Opera versions prior to 9.25, update to version 9.25 or later to resolve the issue.