Lucene search

K
freebsdFreeBSD40856A51-E1D9-11D9-B875-0001020EED82
HistoryJun 16, 2005 - 12:00 a.m.

opera -- "javascript:" URL cross-site scripting vulnerability

2005-06-1600:00:00
vuxml.freebsd.org
22

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

66.3%

A Secunia Advisory reports:

Secunia Research has discovered a vulnerability in Opera,
which can be exploited by malicious people to conduct
cross-site scripting attacks and to read local files.
The vulnerability is caused due to Opera not properly
restricting the privileges of “javascript:” URLs when
opened in e.g. new windows or frames.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlinux-opera< 8.01UNKNOWN
FreeBSDanynoarchopera-devel< 8.01UNKNOWN
FreeBSDanynoarchopera< 8.01UNKNOWN

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

66.3%

Related for 40856A51-E1D9-11D9-B875-0001020EED82