Opera History Object Information Disclosure Weakness
BID:6757
Info
Opera History Object Information Disclosure Weakness
| Bugtraq ID: | 6757 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 04 2003 12:00AM |
| Updated: | Feb 04 2003 12:00AM |
| Credit: | Discovery of this vulnerability credited to GreyMagic Software. |
| Vulnerable: |
Opera Software Opera Web Browser 7.0 win32 |
| Not Vulnerable: |
Opera Software Opera Web Browser 7.0 1win32 |
Discussion
Opera History Object Information Disclosure Weakness
An information disclosure weakness has been reported for Opera 7 browsers on the Microsoft Windows platform.
The weakness is due to the way the history object exposes some properties. Specifically, the properties history.next and history.previous are exposed. Any site can make use of these properties to track a user's web surfing habits.
An information disclosure weakness has been reported for Opera 7 browsers on the Microsoft Windows platform.
The weakness is due to the way the history object exposes some properties. Specifically, the properties history.next and history.previous are exposed. Any site can make use of these properties to track a user's web surfing habits.
Solution / Fix
Opera History Object Information Disclosure Weakness
Solution:
Opera Software has reportedly addressed this issue in Opera 7.01 for Windows.
Opera Software Opera Web Browser 7.0 win32
Solution:
Opera Software has reportedly addressed this issue in Opera 7.01 for Windows.
Opera Software Opera Web Browser 7.0 win32
-
Opera Software Opera Web Browser 7.01 Win32
http://www.opera.com/download/index.dml?opsys=Windows&lng=en&platform= Windows