CVE-2004-2491 | BDVDB-2026-12848 Detail

Description#

A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/16816
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1056.html
http://secunia.com/advisories/12162
http://www.opera.com/windows/changelogs/754/
http://www.osvdb.org/8317
http://www.securityfocus.com/bid/10810

Exploit#

No public exploit known

History#

Version 12005-10-25Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.