CVE-2004-2570

 

Published at: - 31-12-2004 06:00

Last modified: - 06-10-2022 02:13

Total changes: - 3

Description

Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript to read arbitrary files from the client's local filesystem or display a false URL to the user.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• 20040805 Opera: Location, Location, Location-Broken Link
• http://www.greymagic.com/security/advisories/gm008-op/
• http://www.opera.com/docs/changelogs/windows/754/
• GLSA-200408-05-Patch, Third Party Advisory
• 10873-Broken Link, Patch, Third Party Advisory, VDB Entry
• 8331-Broken Link
• 12233-Broken Link, Patch, Vendor Advisory
• opera-location-method-overwrite(16904)-Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2004-2570

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures