CVE-2011-0681

 

Published at: - 31-01-2011 10:00

Last modified: - 06-10-2022 02:13

Total changes: - 2

Description

The Cascading Style Sheets (CSS) Extensions for XML implementation in Opera before 11.01 recognizes links to javascript: URLs in the -o-link property, which makes it easier for remote attackers to bypass CSS filtering via a crafted URL.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• http://www.opera.com/docs/changelogs/windows/1101/
• http://www.opera.com/docs/changelogs/unix/1101/
• http://www.opera.com/docs/changelogs/mac/1101/
• 70727-
• 46036-
• 43023-
• ADV-2011-0231-
• oval:org.mitre.oval:def:12045-

 

Keywords

NVD

 

CVE-2011-0681

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures