PT-2004-3461 · Opera · Opera

Publicado 2004-12-31 · Atualizado 2022-02-28 · CVE-2004-2570

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera versions prior to 7.54

Description The issue allows remote attackers to modify properties and methods of the location object, enabling them to execute Javascript. This can lead to reading arbitrary files from the client's local filesystem or displaying a false URL to the user. The problem exists because Opera fails to block write access to the location object, which could allow a user to create a specially crafted URL to overwrite methods within the location object. This can execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

Recommendations For Opera versions prior to 7.54, update to version 7.54 or later to resolve the issue. As a temporary workaround, consider restricting access to the location object to minimize the risk of exploitation.

Exploit

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

CVE-2004-2570

Produtos afetados

Opera

Referências · 10

• 🔥 http://greymagic.com/security/advisories/gm008-op · Exploit
• http://xforce.iss.net/xforce/xfdb/16904 · Nota
• http://securityfocus.com/bid/10873 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16904 · Nota
• http://gentoo.org/security/en/glsa/glsa-200408-05.xml · Correção, Aviso do Fabricante
• http://secunia.com/advisories/12233 · Aviso do Fabricante
• http://osvdb.org/8331 · Nota
• http://opera.com/docs/changelogs/windows/754 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2004-2570 · Nota de Segurança
• http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0131.html · Nota