PT-2011-5027 · Opera · Opera

Publicado 2011-12-07 · Atualizado 2012-03-06 · CVE-2011-4681

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60

Description The issue allows remote attackers to bypass the Same Origin Policy by leveraging access to a different domain name in the same top-level domain. This can be demonstrated by the .no or .uk domain, where the number of . (dot) characters in domain names of different top-level domains is not properly considered.

Recommendations For Opera versions prior to 11.60, update to version 11.60 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-4681

Produtos afetados

Opera

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2011-4681 · Nota de Segurança
• http://opera.com/docs/changelogs/mac/1160 · Nota
• http://opera.com/support/kb/view/1005 · Nota
• http://opera.com/docs/changelogs/windows/1160 · Nota
• http://opera.com/docs/changelogs/unix/1160 · Nota
• http://opera.com/support/kb/view/1003 · Aviso do Fabricante
• http://opera.com/support/kb/view/1004 · Nota