Description
Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.
References
- http://alt.swiecki.net/oper1.html
- ADV-2007-2537 vdb-entry
- 20070716 Re: Opera/Konqueror: data: URL scheme address bar spoofing mailing-list
- 26074 third-party-advisory
- 38122 vdb-entry
- 1018397 vdb-entry
- GLSA-200708-17 vendor-advisory
- opera-konqueror-addressbar-spoofing(35430) vdb-entry
- 20070713 Opera/Konqueror: data: URL scheme address bar spoofing mailing-list
- 26545 third-party-advisory
- 24917 vdb-entry
- SUSE-SR:2007:015 vendor-advisory
- 2891 third-party-advisory