medium5.0Public exploit code
CVE-2001-0898
Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Opera 5.0/5.1 - Same Origin Policy Circumvention2001-11-15 · remote · windows · Verified
Impact
Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to the domain has been opened or (2) access data via about:cache.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opera Software | Opera Web Browser | through 6.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=100586079932284&w=2
- http://marc.info/?l=bugtraq&m=100588139312696&w=2
- http://www.iss.net/security_center/static/7567.php
- http://www.securityfocus.com/bid/3553
- http://marc.info/?l=bugtraq&m=100586079932284&w=2
- http://marc.info/?l=bugtraq&m=100588139312696&w=2
- http://www.iss.net/security_center/static/7567.php
- http://www.securityfocus.com/bid/3553