CVE-2009-3049: Opera Browser

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote attackers to spoof URLs and conduct phishing attacks, related to Unicode and Punycode.

Affected products

• Opera Opera Browser: up to and including 10.00; version 7.0 only; version 7.23 only; version 7.53 only; version 7.54 only; version 7.60 only; …

Published 2009-09-02. Last modified 2026-06-16.