Opera Web Browser IFrame OnLoad Address Bar URL Obfuscation Weakness
BID:10679
Info
Opera Web Browser IFrame OnLoad Address Bar URL Obfuscation Weakness
| Bugtraq ID: | 10679 |
| Class: | Race Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 08 2004 12:00AM |
| Updated: | Jul 08 2004 12:00AM |
| Credit: | Discovery of this issue is credited to "bitlance winter" <[email protected]>. |
| Vulnerable: |
Opera Software Opera Web Browser 7.52 Opera Software Opera Web Browser 7.51 Opera Software Opera Web Browser 7.50 |
| Not Vulnerable: |
Opera Software Opera Web Browser 7.53 |
Discussion
Opera Web Browser IFrame OnLoad Address Bar URL Obfuscation Weakness
Opera Web Browser is prone to a security weakness that may permit malicious web pages to spoof address bar information.
It is currently not known if this issue is related to the Opera Web Browser Address Bar Spoofing Weakness reported in BID 10337. As more information becomes available this BID will be updated.
This issue may be used to spoof information in the address bar, facilitating phishing attacks against unsuspecting users.
This issue is reported to affect Opera Web Browser version 7.52, it is likely that other versions are affected as well.
Opera Web Browser is prone to a security weakness that may permit malicious web pages to spoof address bar information.
It is currently not known if this issue is related to the Opera Web Browser Address Bar Spoofing Weakness reported in BID 10337. As more information becomes available this BID will be updated.
This issue may be used to spoof information in the address bar, facilitating phishing attacks against unsuspecting users.
This issue is reported to affect Opera Web Browser version 7.52, it is likely that other versions are affected as well.
Exploit / POC
Opera Web Browser IFrame OnLoad Address Bar URL Obfuscation Weakness
The following exploit has been provided:
The following exploit has been provided:
Solution / Fix
Opera Web Browser IFrame OnLoad Address Bar URL Obfuscation Weakness
Solution:
Opera 7.53 is available to address this issue.
Gentoo has released an advisory (GLSA 200407-15) to address this and other issues in Opera. Please see the referenced advisory for more information. Gentoo users may carry out the following commands to upgrade their computers:
emerge sync
emerge -pv ">=net-www/opera-7.53"
emerge ">=net-www/opera-7.53"
Gentoo has released advisory GLSA 200408-05 dealing with this issue. All Opera users should upgrade to the latest stable version:
# emerge sync
# emerge -pv ">=net-www/opera-7.54"
# emerge ">=net-www/opera-7.54"
Please see the referenced Gentoo advisory for more information.
Opera Software Opera Web Browser 7.50
Opera Software Opera Web Browser 7.51
Opera Software Opera Web Browser 7.52
Solution:
Opera 7.53 is available to address this issue.
Gentoo has released an advisory (GLSA 200407-15) to address this and other issues in Opera. Please see the referenced advisory for more information. Gentoo users may carry out the following commands to upgrade their computers:
emerge sync
emerge -pv ">=net-www/opera-7.53"
emerge ">=net-www/opera-7.53"
Gentoo has released advisory GLSA 200408-05 dealing with this issue. All Opera users should upgrade to the latest stable version:
# emerge sync
# emerge -pv ">=net-www/opera-7.54"
# emerge ">=net-www/opera-7.54"
Please see the referenced Gentoo advisory for more information.
Opera Software Opera Web Browser 7.50
-
Opera Software Opera 7.53
http://www.opera.com/download/
Opera Software Opera Web Browser 7.51
-
Opera Software Opera 7.53
http://www.opera.com/download/
Opera Software Opera Web Browser 7.52
-
Opera Software Opera 7.53
http://www.opera.com/download/
References
Opera Web Browser IFrame OnLoad Address Bar URL Obfuscation Weakness
References:
References:
- Opera 7.53 for Linux Changelog (Opera Software)
- Opera Web Browser Home Page (Opera Software)