CVE-2010-1989: Opera 9.52 executes a mail application in situations where an IMG element has a SRC attribute that is a red...

Security readout for executives and security teams

This CVE describes a denial-of-service issue in Opera 9.52. A malicious HTML page could make the browser repeatedly open the configured mail application, disrupting the user session. The source bundle does not show data theft, code execution, active exploitation, CVSS scoring, or a named vendor fix. Exposure is most likely limited to environments still running Opera 9.52 or comparable legacy browser configurations that handle redirected mailto: URLs insecurely. Treat this as a legacy-technology hygiene issue. It is not shown as actively exploited, but any remaining Opera 9.52 use should be removed because unsupported browsers carry broader risk. Mitigation focus: Identify and retire Opera 9.52 from managed endpoints.; Check Opera or vendor guidance for supported upgrade or replacement paths.; Limit legacy browsers from general web browsing where removal is delayed..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.