CVE-2004-2570

Description

Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript to read arbitrary files from the client's local filesystem or display a false URL to the user.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16904

http://www.gentoo.org/security/en/glsa/glsa-200408-05.xml

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3