FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0717

This CVE name corresponds to:

Entered	Topic
2004-08-12	Mutiple browser frame injection vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0717 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0717
Phase	Assigned(20040722)

Description

Opera 7.51 for Windows and 7.50 for Linux does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

References

Source	Reference
SECUNIA	11978
MISC	http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/
XF	http-frame-spoof(1598)