Anfälligkeitssuche        Suche in 187964 CVE Beschreibungen
und 85075 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.14245
Kategorie:Windows
Titel:Opera web browser address bar spoofing weakness (2)
Zusammenfassung:The remote host contains a web browser that is vulnerable to; address bar spoofing attacks.;; Description :; The remote host is using Opera, an alternative web browser.; This version of Opera is vulnerable to a security weakness that may; permit malicious web pages to spoof address bar information. It is; reported that the 'favicon' feature can be used to spoof the domain of; a malicious web page. An attacker can create an icon that includes; the text of the desired site and is similar to the way Opera displays; information in the address bar. The attacker can then obfuscate the; real address with spaces.;; This issue can be used to spoof information in the address bar, page; bar and page/window cycler.
Beschreibung:Summary:
The remote host contains a web browser that is vulnerable to
address bar spoofing attacks.

Description :
The remote host is using Opera, an alternative web browser.
This version of Opera is vulnerable to a security weakness that may
permit malicious web pages to spoof address bar information. It is
reported that the 'favicon' feature can be used to spoof the domain of
a malicious web page. An attacker can create an icon that includes
the text of the desired site and is similar to the way Opera displays
information in the address bar. The attacker can then obfuscate the
real address with spaces.

This issue can be used to spoof information in the address bar, page
bar and page/window cycler.

Solution:
Install to Opera 7.51 or newer.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:P/A:N

Querverweis: BugTraq ID: 10452
Common Vulnerability Exposure (CVE) ID: CVE-2004-0537
http://www.securityfocus.com/bid/10452
Bugtraq: 20040603 Phishing for Opera (GM#007-OP) (Google Search)
http://marc.info/?l=bugtraq&m=108627581717738&w=2
http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022263.html
http://security.greymagic.com/security/advisories/gm007-op/
http://osvdb.org/6590
http://secunia.com/advisories/11762
XForce ISS Database: opera-favicon-spoofing(16307)
https://exchange.xforce.ibmcloud.com/vulnerabilities/16307
CopyrightCopyright (C) 2004 David Maciejak

Dies ist nur einer von 85075 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2020 E-Soft Inc. Alle Rechte vorbehalten.