Description
Opera 7.54 and earlier does not properly validate base64 encoded binary data in a data: (RFC 2397) URL, which causes the URL to be obscured in a download dialog, which may allow remote attackers to trick users into executing arbitrary code.
References
- VU#882926 third-party-advisory
- 13818 third-party-advisory
- SUSE-SA:2005:031 vendor-advisory
- opera-data-dialog-spoofing(18867) vdb-entry
- GLSA-200502-17 vendor-advisory
- http://www.opera.com/linux/changelogs/754u2/