Description
Opera before 10.01 on Windows does not prevent use of Web fonts in rendering the product's own user interface, which allows remote attackers to spoof the address field via a crafted web site.
References
- 59359 vdb-entry
- ADV-2009-3073 vdb-entry
- http://www.opera.com/support/kb/view/940/
- 37182 third-party-advisory
- 36850 vdb-entry
- opera-web-fonts-spoofing(54022) vdb-entry
- oval:org.mitre.oval:def:6384 vdb-entry signature
- http://www.opera.com/docs/changelogs/windows/1001/