CVE-2004-1157

Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
Configurations

Configuration 1 (hide)

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*

History

20 Nov 2024, 23:50

Type Values Removed Values Added
References () http://secunia.com/advisories/13253/ - Broken Link, Vendor Advisory () http://secunia.com/advisories/13253/ - Broken Link, Vendor Advisory
References () http://secunia.com/multiple_browsers_window_injection_vulnerability_test/ - Broken Link () http://secunia.com/multiple_browsers_window_injection_vulnerability_test/ - Broken Link
References () http://secunia.com/secunia_research/2004-13/advisory/ - Broken Link () http://secunia.com/secunia_research/2004-13/advisory/ - Broken Link
References () http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml - Third Party Advisory () http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml - Third Party Advisory

Information

Published : 2005-01-10 05:00

Updated : 2024-11-20 23:50


NVD link : CVE-2004-1157

Mitre link : CVE-2004-1157

CVE.ORG link : CVE-2004-1157


JSON object : View

Products Affected

opera

  • opera_browser
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')