CVE:CVE-2009-2068
CNNVD:CNNVD-200906-259
Google Chrome只有当最高级结构使用https时，检测https网络页面的http内容，中间人攻击者可以在一个https站点的内容中，通过修改一个http页来包含一个https iframe，来执行任意web脚本，且该iframe在一个http站点上参考一个脚本文件比国内与http预设的单能下载的页(HPIHSL)"相关。
solution:Upgrade opera opera to a higher version than 5..10,5.0,5.0:beta_2,5.0:beta_3,5.0:beta_4,5.0:beta_5,5.0:beta_6,5.0:beta_7,5.0:beta_8,5.1,5.02,5.2,5.3,5.4,5.5,5.6,5.7,5.8,5.9,5.10,5.11,5.12,6:beta_1,6.0,6.0:beta_1,6.0:beta_2,6.0:beta_3,6.1,6.01,6.02,6.03,6.04,6.05,6.06,6.11,6.12,7:beta_1,7.0,7.0:beta_1,7.0:beta_1v2,7.0:beta_2,7.01,7.02,7.03,7.10,7.11,7.20,7.20:beta7,7.21,7.22,7.23,7.30,7.50,7.50:beta_1,7.51,7.52,7.54,7.54:update_1,7.55,8.0,8.0:beta_1,8.0:beta_2,8.01,8.02,8.51,8.52,8.53,8.54,9.0:beta_1,9.01,9.02,9.10,9.20,9.21,9.23,and avoid the version 5..10,5.0,5.0:beta_2,5.0:beta_3,5.0:beta_4,5.0:beta_5,5.0:beta_6,5.0:beta_7,5.0:beta_8,5.1,5.02,5.2,5.3,5.4,5.5,5.6,5.7,5.8,5.9,5.10,5.11,5.12,6:beta_1,6.0,6.0:beta_1,6.0:beta_2,6.0:beta_3,6.1,6.01,6.02,6.03,6.04,6.05,6.06,6.11,6.12,7:beta_1,7.0,7.0:beta_1,7.0:beta_1v2,7.0:beta_2,7.01,7.02,7.03,7.10,7.11,7.20,7.20:beta7,7.21,7.22,7.23,7.30,7.50,7.50:beta_1,7.51,7.52,7.54,7.54:update_1,7.55,8.0,8.0:beta_1,8.0:beta_2,8.01,8.02,8.51,8.52,8.53,8.54,9.0:beta_1,9.01,9.02,9.10,9.20,9.21,9.23