CVE-2004-1157

2005-01-10T05:00:00
ID CVE-2004-1157
Type cve
Reporter cve@mitre.org
Modified 2008-09-05T20:40:00

Description

Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.