CVE-2002-0783

Description

Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL.

Affected products

• opera_software / opera_web_browser5.12 – 5.12
• opera_software / opera_web_browser5.12 – 5.12
• opera_software / opera_web_browser6.0 – 6.0
• opera_software / opera_web_browser6.0 – 6.0
• opera_software / opera_web_browser6.0.1 – 6.0.1
• opera_software / opera_web_browser6.0.1 – 6.0.1

Exploits & proofs of concept

• exploit-dbOpera 5.12/6.0 - Frame Location Same Origin Policy Circumventionby Andreas Sandblad

References

• MISChttp://www.iss.net/security_center/static/9096.php
• MISChttp://archives.neohapsis.com/archives/bugtraq/2002-05/0117.html
• MISChttp://www.securityfocus.com/bid/4745