Unscored severity · published Aug 12, 2002
CVE-2002-0783
Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OW
Opera Web Browser · Opera Software
5.12; 5.12; 6.0; 6.0; 6.0.1; 6.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0783
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0783
Exploit
http://archives.neohapsis.com/archives/bugtraq/2002-05/0117.html
Patch
http://www.iss.net/security_center/static/9096.php
Exploit
http://www.securityfocus.com/bid/4745
More from Opera Web Browser
–
CVE-2005-0233
The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names…
–
CVE-2002-2358
Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title…
–
CVE-2002-2332
Buffer overflow in Opera 6.01 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes
–
CVE-2002-2311
Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1)…
–
CVE-2002-0898
Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a…