CVE-2007-1115

2007-02-2623:28:00

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.017

Percentile

88.0%

JSON

The child frames in Opera 9 before 9.20 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.

Affected configurations

Nvd

Node

operaopera_browserMatch9.0

operaopera_browserMatch9.0beta1

operaopera_browserMatch9.0beta2

operaopera_browserMatch9.01

operaopera_browserMatch9.02

operaopera_browserMatch9.10

operaopera_browserMatch9.12

operaopera_browserMatch9.20

operaopera_browserMatch9.20beta1

VendorProductVersionCPE
operaopera_browser9.0cpe:2.3:a:opera:opera_browser:9.0:*:*:*:*:*:*:*
operaopera_browser9.0cpe:2.3:a:opera:opera_browser:9.0:beta1:*:*:*:*:*:*
operaopera_browser9.0cpe:2.3:a:opera:opera_browser:9.0:beta2:*:*:*:*:*:*
operaopera_browser9.01cpe:2.3:a:opera:opera_browser:9.01:*:*:*:*:*:*:*
operaopera_browser9.02cpe:2.3:a:opera:opera_browser:9.02:*:*:*:*:*:*:*
operaopera_browser9.10cpe:2.3:a:opera:opera_browser:9.10:*:*:*:*:*:*:*
operaopera_browser9.12cpe:2.3:a:opera:opera_browser:9.12:*:*:*:*:*:*:*
operaopera_browser9.20cpe:2.3:a:opera:opera_browser:9.20:*:*:*:*:*:*:*
operaopera_browser9.20cpe:2.3:a:opera:opera_browser:9.20:beta1:*:*:*:*:*:*

Vendor	Product	Version	CPE
opera	opera_browser	9.0	cpe:2.3:a:opera:opera_browser:9.0:::::::*
opera	opera_browser	9.0	cpe:2.3:a:opera:opera_browser:9.0:beta1::::::
opera	opera_browser	9.0	cpe:2.3:a:opera:opera_browser:9.0:beta2::::::
opera	opera_browser	9.01	cpe:2.3:a:opera:opera_browser:9.01:::::::*
opera	opera_browser	9.02	cpe:2.3:a:opera:opera_browser:9.02:::::::*
opera	opera_browser	9.10	cpe:2.3:a:opera:opera_browser:9.10:::::::*
opera	opera_browser	9.12	cpe:2.3:a:opera:opera_browser:9.12:::::::*
opera	opera_browser	9.20	cpe:2.3:a:opera:opera_browser:9.20:::::::*
opera	opera_browser	9.20	cpe:2.3:a:opera:opera_browser:9.20:beta1::::::