CVE-2001-0898

Description

Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to the domain has been opened or (2) access data via about:cache.

Affected products

• opera_software / opera_web_browser6.0

Exploits & proofs of concept

• exploit-dbOpera 5.0/5.1 - Same Origin Policy Circumventionby Georgi Guninski

References

• MISChttp://www.securityfocus.com/bid/3553
• MISChttp://www.iss.net/security_center/static/7567.php
• MAILING_LISThttp://marc.info/?l=bugtraq&m=100588139312696&w=2
• MAILING_LISThttp://marc.info/?l=bugtraq&m=100586079932284&w=2