CVE-2008-2716

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html	Third Party Advisory
http://secunia.com/advisories/30636	Broken Link
http://secunia.com/advisories/30682	Broken Link
http://www.opera.com/docs/changelogs/linux/950/#security	Broken Link Vendor Advisory
http://www.opera.com/docs/changelogs/windows/950/#security	Broken Link Vendor Advisory
http://www.opera.com/support/search/view/885/	Broken Link Vendor Advisory
http://www.securityfocus.com/bid/29684	Broken Link Patch Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1020292	Broken Link Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2008/1812	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/43033	Third Party Advisory VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html	Third Party Advisory
http://secunia.com/advisories/30636	Broken Link
http://secunia.com/advisories/30682	Broken Link
http://www.opera.com/docs/changelogs/linux/950/#security	Broken Link Vendor Advisory
http://www.opera.com/docs/changelogs/windows/950/#security	Broken Link Vendor Advisory
http://www.opera.com/support/search/view/885/	Broken Link Vendor Advisory
http://www.securityfocus.com/bid/29684	Broken Link Patch Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1020292	Broken Link Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2008/1812	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/43033	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2008-06-16 22:41

Updated : 2025-04-09 00:30

NVD link : CVE-2008-2716

Mitre link : CVE-2008-2716

CVE.ORG link : CVE-2008-2716

JSON object : View

Products Affected

opera

opera_browser

CWE

CWE-1021

Improper Restriction of Rendered UI Layers or Frames

{"id": "CVE-2008-2716", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-06-16T22:41:00.000", "references": [{"url": "http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/30636", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/30682", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "http://www.opera.com/docs/changelogs/linux/950/#security", "tags": ["Broken Link", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.opera.com/docs/changelogs/windows/950/#security", "tags": ["Broken Link", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.opera.com/support/search/view/885/", "tags": ["Broken Link", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/29684", "tags": ["Broken Link", "Patch", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1020292", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/1812", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43033", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/30636", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/30682", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.opera.com/docs/changelogs/linux/950/#security", "tags": ["Broken Link", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.opera.com/docs/changelogs/windows/950/#security", "tags": ["Broken Link", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.opera.com/support/search/view/885/", "tags": ["Broken Link", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/29684", "tags": ["Broken Link", "Patch", "Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1020292", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2008/1812", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43033", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-1021"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks."}, {"lang": "es", "value": "Vulnerabilidad no especificada en Opera versiones anteriores a 9.5 permite a atacantes remotos suplantar los contenidos de marcos de confianza en la misma p\u00e1gina padre mediante la modificaci\u00f3n de la localizaci\u00f3n, lo cual puede facilitar los ataques de phishing."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BA98379-69F0-409C-BD52-A667DDF00F8C", "versionEndExcluding": "9.5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}