CVE-2004-1157 Common Vulnerabilities and Exposures

Upstream information

CVE-2004-1157 at MITRE

Description

Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores
	National Vulnerability Database
Base Score	7.5
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
Access Vector	Network
Access Complexity	Low
Authentication	None
Confidentiality Impact	Partial
Integrity Impact	Partial
Availability Impact	Partial

No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

SUSE-SA:2005:034, published Wed, 22 Jun 2005 16:00:00 +0000

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 01:05:13 2013
CVE page last modified: Wed Mar 26 11:14:37 2025