CVE-2004-0717

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 27-07-2004 06:00

Last modified: - 28-02-2022 06:28

Total changes: - 1

Description

Opera 7.51 for Windows and 7.50 for Linux does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Low

Attack complexity

Network

Attack vector

Low

Availability

Low

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

7.5

Base score

10.0

6.4

Exploitability score

Impact score

Verification logic

AND

vendor=opera AND product=opera_browser AND version=7.50

vendor=linux AND product=linux_kernel AND version=-

AND

vendor=opera AND product=opera_browser AND version=7.51

vendor=microsoft AND product=windows AND version=-

Reference

http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/
11978-Broken Link, Vendor Advisory
http-frame-spoof(1598)-Third Party Advisory, VDB Entry

Keywords

CVE-2004-0717

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2004-0717

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures