CVE-2006-3331: Opera Browser

Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days.

Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks.

Affected products

• Opera Opera Browser: before 9.0 (fixed in 9.0)

Published 2006-06-30. Last modified 2026-06-16.