Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces.

The remote Opera Web Browser is vulnerable to at least 20 bugs.  An attacker, exploiting these flaws, would be able to execute code on the remote system.  The attacker would need to be able to coerce the local Opera user to browse to a malicous website. 

The version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information.  It is reported that the 'favicon' feature can be used to spoof the domain of a malicious web page.  An attacker can create an icon that includes the text of the desired site and is similar to the way Opera displays information in the address bar.  The attacker can then obfuscate the real address with spaces. 

This issue can be used to spoof information in the address bar, page bar and page/window cycler.

The remote Opera Web Browser is vulnerable to at least 20 bugs.  An attacker, exploiting these flaws, would be able to execute code on the remote system.  The attacker would need to be able to coerce the local Opera user to browse to a malicous website.

ID	Name	Product	Family	Severity
1243	Opera Web Browser < 7.5.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
14245	Opera < 7.51 favicon.ico Address Bar Spoofing	Nessus	Windows	medium
800838	Opera Web Browser < 7.5.4 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	medium

Detections

Analytics

CVE-2004-0537

high

Tenable Plugins

medium

medium

medium