CVE-2008-2716

Published: Jun 16, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks.

Affected (1)

Products: Opera: Opera Browser

Opera

1 product

Opera Browser

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opera Opera Browser	Before 9.5

Related CWEs

CWE-1021

Improper Restriction of Rendered UI Layers or Frames

The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with.

References (20)

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/30636

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/30682

Source: cve@mitre.org

Broken Link

http://www.opera.com/docs/changelogs/linux/950/#security

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.opera.com/docs/changelogs/windows/950/#security

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.opera.com/support/search/view/885/

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.securityfocus.com/bid/29684

Source: cve@mitre.org

Broken LinkPatchThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1020292

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2008/1812

Source: cve@mitre.org

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/43033

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html