PT-2004-3461 · Opera · Opera

Published 2004-12-31 · Updated 2022-02-28 · CVE-2004-2570

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera versions prior to 7.54

Description The issue allows remote attackers to modify properties and methods of the location object, enabling them to execute Javascript. This can lead to reading arbitrary files from the client's local filesystem or displaying a false URL to the user. The problem exists because Opera fails to block write access to the location object, which could allow a user to create a specially crafted URL to overwrite methods within the location object. This can execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

Recommendations For Opera versions prior to 7.54, update to version 7.54 or later to resolve the issue. As a temporary workaround, consider restricting access to the location object to minimize the risk of exploitation.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2004-2570

Affected Products

Opera

References · 10

• 🔥 http://greymagic.com/security/advisories/gm008-op · Exploit
• http://securityfocus.com/bid/10873 · Patch
• http://secunia.com/advisories/12233 · Vendor Advisory
• http://opera.com/docs/changelogs/windows/754 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-2570 · Security Note
• http://xforce.iss.net/xforce/xfdb/16904 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16904 · Note
• http://gentoo.org/security/en/glsa/glsa-200408-05.xml · Patch, Vendor Advisory
• http://osvdb.org/8331 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0131.html · Note