CVE

Id
9585  
CVE No.
CVE-2004-1157  
Status
Candidate  
Description
Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.  
Phase
Assigned (20041208)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
65046 9585 CVE-2004-1157 MISC:http://secunia.com/secunia_research/2004-13/advisory/  View
65047 9585 CVE-2004-1157 SECUNIA:13253  View
65048 9585 CVE-2004-1157 URL:http://secunia.com/advisories/13253/  View
65049 9585 CVE-2004-1157 MISC:http://secunia.com/multiple_browsers_window_injection_vulnerability_test/  View
65050 9585 CVE-2004-1157 GENTOO:GLSA-200502-17  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63176 JVNDB-2004-000518 KDE Konqueror のクロスドメインセキュリティチェック機能におけるコンテンツ表示を制御される脆弱性 ------------ CVE-2004-1158 9585 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000518.html  View