Description
Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks.
References
- 1016406 vdb-entry
- SUSE-SA:2006:038 vendor-advisory
- 20897 third-party-advisory
- 18692 vdb-entry
- http://secunia.com/secunia_research/2006-49/advisory/
- 19480 third-party-advisory
- opera-ssl-certificate-hijacking(27449) vdb-entry
- 1177 third-party-advisory
- ADV-2006-2571 vdb-entry
- 20060628 Secunia Research: Opera SSL Certificate "Stealing" Weakness mailing-list