CVE-2008-2716

CVSS V2 Medium 5 CVSS V3 None

Description

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks.

Overview

CVE ID
CVE-2008-2716

Assigner
cve@mitre.org

Vulnerability Status
Analyzed

Published Version
2008-06-16T22:41:00

Last Modified Date
2022-03-01T15:05:44

Weakness Enumerations

CWE	URL
CWE-1021	http://cwe.mitre.org/data/definitions/1021.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:opera:opera_browser::::::::	1	OR		9.5

CVSS Version 2

Version
2.0

Vector String
AV:N/AC:L/Au:N/C:N/I:P/A:N

Access Vector
NETWORK

Access Compatibility
LOW

Authentication
NONE

Confidentiality Impact
NONE

Integrity Impact
PARTIAL

Availability Impact
NONE

Base Score
5

Severity
MEDIUM

Exploitability Score
10

Impact Score
2.9

References

Reference URL	Reference Tags
http://www.opera.com/docs/changelogs/linux/950/#security	Broken Link Vendor Advisory
http://www.opera.com/docs/changelogs/windows/950/#security	Broken Link Vendor Advisory
http://www.opera.com/support/search/view/885/	Broken Link Vendor Advisory
http://www.securityfocus.com/bid/29684	Broken Link Patch Third Party Advisory VDB Entry
http://secunia.com/advisories/30636	Broken Link
http://secunia.com/advisories/30682	Broken Link
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html	Third Party Advisory
http://www.securitytracker.com/id?1020292	Broken Link Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2008/1812	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/43033	Third Party Advisory VDB Entry

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2008-2716
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2716

History

Created	Old Value	New Value	Data Type	Notes
2022-05-10 15:48:02				Added to TrackCVE