Description
Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces.
References
- 10452 vdb-entry
- 11762 third-party-advisory
- 6590 vdb-entry
- http://www.opera.com/linux/changelogs/751/index.dml
- 20040603 Phishing for Opera (GM#007-OP) mailing-list
- opera-favicon-spoofing(16307) vdb-entry
- 20040603 Phishing for Opera (GM#007-OP) mailing-list
- http://security.greymagic.com/security/advisories/gm007-op/