CVE-2012-3560

MEDIUM

Description

Opera before 11.65 does not ensure that the address field corresponds to the displayed web page during blocked navigation, which makes it easier for remote attackers to conduct spoofing attacks by detecting and preventing attempts to load a different web page.

References

http://blog.vulnhunt.com/index.php/2012/06/14/cal-2012-0015-opera-website-spoof/

http://www.opera.com/docs/changelogs/mac/1165/

http://www.opera.com/docs/changelogs/mac/1200/

http://www.opera.com/docs/changelogs/unix/1200/

http://www.opera.com/docs/changelogs/windows/1200/

http://www.opera.com/support/kb/view/1022/

Details

Source: MITRE

Published: 2012-06-14

Updated: 2012-06-15

Type: CWE-264

Risk Information

CVSS v2.0

Base Score: 4.3

Vector: (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Impact Score: 2.9

Exploitability Score: 8.6

Severity: MEDIUM