PT-2008-4158 · Opera · Opera

Publicado 2008-06-16 · Atualizado 2017-08-08 · CVE-2008-2714

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera versions prior to 9.26

Description The issue allows remote attackers to misrepresent web page addresses by using certain characters that cause the page address text to be misplaced. This can be exploited to make a site's address look like another site's address.

Recommendations For Opera versions prior to 9.26, update to version 9.26 or later to resolve the issue. As a temporary workaround, consider avoiding the use of certain characters in page addresses until a patch is available. Restrict access to untrusted websites to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2008-2714

Produtos afetados

Opera

Referências · 10

• http://vupen.com/english/advisories/2008/1812 · Nota
• http://opera.com/support/search/view/878 · Nota
• http://opera.com/docs/changelogs/windows/950/#security · Nota
• http://secunia.com/advisories/30682 · Nota
• http://opera.com/docs/changelogs/linux/950/#security · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43035 · Nota
• http://securityfocus.com/bid/29684 · Correção
• http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-2714 · Nota de Segurança
• http://secunia.com/advisories/30636 · Aviso do Fabricante