PT-2008-4158 · Opera · Opera

Published 2008-06-16 · Updated 2017-08-08 · CVE-2008-2714

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera versions prior to 9.26

Description The issue allows remote attackers to misrepresent web page addresses by using certain characters that cause the page address text to be misplaced. This can be exploited to make a site's address look like another site's address.

Recommendations For Opera versions prior to 9.26, update to version 9.26 or later to resolve the issue. As a temporary workaround, consider avoiding the use of certain characters in page addresses until a patch is available. Restrict access to untrusted websites to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2008-2714

Affected Products

Opera

References · 10

• http://securityfocus.com/bid/29684 · Patch
• http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2714 · Security Note
• http://secunia.com/advisories/30636 · Vendor Advisory
• http://vupen.com/english/advisories/2008/1812 · Note
• http://opera.com/support/search/view/878 · Note
• http://opera.com/docs/changelogs/windows/950/#security · Note
• http://secunia.com/advisories/30682 · Note
• http://opera.com/docs/changelogs/linux/950/#security · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43035 · Note