CVE-2004-2570

Description

Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript to read arbitrary files from the client's local filesystem or display a false URL to the user.

Weakness classification

• CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Primary references

• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link, Patch, Vendor Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Broken Link, Exploit, Vendor Advisory
• cve@mitre.org — Broken Link, Patch
• cve@mitre.org — Broken Link, Patch, Third Party Advisory, VDB Entry
• cve@mitre.org — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory