Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to the domain has been opened or (2) access data via about:cache.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Opera_web_browser | Opera_software | * | 6.0 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=100586079932284\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=100588139312696\u0026w=2
- http://www.iss.net/security_center/static/7567.php
- http://www.securityfocus.com/bid/3553
- http://marc.info/?l=bugtraq\u0026m=100586079932284\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=100588139312696\u0026w=2
- http://www.iss.net/security_center/static/7567.php
- http://www.securityfocus.com/bid/3553