6415 matches found
CVE-2012-3558: Undefined Security Weakness
Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during unusually timed changes to this field, which makes it easier for user-assisted remote attackers to conduct spoofing attacks via vectors involving navigation, reloads, and redirects...
CVE-2012-3560: Undefined Security Weakness
Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it easier for remote attackers to conduct spoofing attacks by detecting and preventing attempts to load a different web page...
CVE-2012-3555: Undefined Security Weakness
Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conduct cross-site scripting XSS attacks or execute arbitrary code via a crafted web site, related to a "hidden keyboard navigation" issue...
PT-2012-4808
Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.65 Description The issue allows remote attackers to conduct spoofing attacks by manipulating the address field during navigation, reloads, and redirects, making it easier to deceive users about the actual web page...
Carefully timed reloads, redirects, and navigation can spoof the address field
The address field should always show the address of the page that is being displayed. Certain types of navigation, combined with reloads and redirects to a slowly-responding target site can cause the address field to show the target site's address, while the attacking site is still being displaye...
Hidden keyboard navigation can allow cross site scripting or code execution
When a user is interacting with a window, that window should be visible to the user, to ensure that the user realizes it is there. If a page is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can en...
Pages can prevent navigation to a target page, spoofing the address field
When a user types a new URL for the browser to load, the currently active page may detect when the new page is about to load and prevent the navigation, while still leaving the new URL displayed in the address bar. This can then be used to spoof the URL of the target page. The malicious page woul...
Carefully timed reloads, redirects, and navigation can spoof the address field – Opera Security Advisories
The address field should always show the address of the page that is being displayed. Certain types of navigation, combined with reloads and redirects to a slowly-responding target site can cause the address field to show the target site’s address, while the attacking site is still being displaye...
Pages can prevent navigation to a target page, spoofing the address field – Opera Security Advisories
When a user types a new URL for the browser to load, the currently active page may detect when the new page is about to load and prevent the navigation, while still leaving the new URL displayed in the address bar. This can then be used to spoof the URL of the target page. The malicious page woul...
Hidden keyboard navigation can allow cross site scripting or code execution – Opera Security Advisories
When a user is interacting with a window, that window should be visible to the user, to ensure that the user realizes it is there. If a page is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can en...
Browser Navigation Download Trick
Another moderately interesting tidbit, I guess... It is an important and little-known property of web browsers that one document can always navigate other, non-same-origin windows to arbitrary URLs. Perhaps more interestingly, you can also navigate third-party documents to resources served with...
Browsers Browsers - Navigation Download Trick
Browsers Browsers - Navigation Download Trick Another moderately interesting tidbit, I guess... It is an important and little-known property of web browsers that one document can always navigate other, non-same-origin windows to arbitrary URLs. Perhaps more interestingly, you can also navigate...
Browser Navigation Download Trick (Chrome / IE / Firefox)
Exploit for multiple platform in category local exploits Another moderately interesting tidbit, I guess... It is an important and little-known property of web browsers that one document can always navigate other, non-same-origin windows to arbitrary URLs. Perhaps more interestingly, you can also...
Browsers Browsers - Navigation Download Trick
Another moderately interesting tidbit, I guess... It is an important and little-known property of web browsers that one document can always navigate other, non-same-origin windows to arbitrary URLs. Perhaps more interestingly, you can also navigate third-party documents to resources served with...
Google Chrome < 19.0.1084.46 Multiple Vulnerabilities
Binary data 800898.prm...
Google Chrome < 19.0.1084.46 Multiple Vulnerabilities
Binary data 6487.pasl...
CVE-2011-3087
Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors...
CVE-2011-3087
Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors...
