Description
Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
References
- 1024570 vdb-entry
- oval:org.mitre.oval:def:12115 vdb-entry signature
- http://www.opera.com/docs/changelogs/mac/1063/
- http://www.opera.com/support/kb/view/976/
- 41740 third-party-advisory
- http://www.opera.com/docs/changelogs/unix/1063/
- http://www.opera.com/docs/changelogs/windows/1063/