Test ID:	1.3.6.1.4.1.25623.1.0.14245
Category:	Windows
Title:	Opera web browser address bar spoofing weakness (2)
Summary:	The remote host contains a web browser that is vulnerable to; address bar spoofing attacks.;; Description :; The remote host is using Opera, an alternative web browser.; This version of Opera is vulnerable to a security weakness that may; permit malicious web pages to spoof address bar information. It is; reported that the 'favicon' feature can be used to spoof the domain of; a malicious web page. An attacker can create an icon that includes; the text of the desired site and is similar to the way Opera displays; information in the address bar. The attacker can then obfuscate the; real address with spaces.;; This issue can be used to spoof information in the address bar, page; bar and page/window cycler.
Description:	Summary: The remote host contains a web browser that is vulnerable to address bar spoofing attacks. Description : The remote host is using Opera, an alternative web browser. This version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information. It is reported that the 'favicon' feature can be used to spoof the domain of a malicious web page. An attacker can create an icon that includes the text of the desired site and is similar to the way Opera displays information in the address bar. The attacker can then obfuscate the real address with spaces. This issue can be used to spoof information in the address bar, page bar and page/window cycler. Solution: Install to Opera 7.51 or newer. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0537 BugTraq ID: 10452 http://www.securityfocus.com/bid/10452 Bugtraq: 20040603 Phishing for Opera (GM#007-OP) (Google Search) http://marc.info/?l=bugtraq&m=108627581717738&w=2 http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022263.html http://security.greymagic.com/security/advisories/gm007-op/ http://osvdb.org/6590 http://secunia.com/advisories/11762 XForce ISS Database: opera-favicon-spoofing(16307) https://exchange.xforce.ibmcloud.com/vulnerabilities/16307
Copyright	Copyright (C) 2004 David Maciejak

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.