CVE-2011-4690

 

Published at: - 07-12-2011 08:55

Last modified: - 06-10-2022 02:13

Total changes: - 2

Description

Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:N/A:N

 

Verification logic

 

Reference

• 47128-Vendor Advisory
• http://lcamtuf.coredump.cx/cachetime/

 

Keywords

NVD

 

CVE-2011-4690

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures