CVE-2004-1157

Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
Configurations

Configuration 1 (hide)

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2005-01-10 05:00

Updated : 2024-02-28 10:42


NVD link : CVE-2004-1157

Mitre link : CVE-2004-1157

CVE.ORG link : CVE-2004-1157


JSON object : View

Products Affected

opera

  • opera_browser
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')