Description
The Cascading Style Sheets (CSS) Extensions for XML implementation in Opera before 11.01 recognizes links to javascript: URLs in the -o-link property, which makes it easier for remote attackers to bypass CSS filtering via a crafted URL.
References
- http://www.opera.com/docs/changelogs/windows/1101/
- ADV-2011-0231 vdb-entry
- http://www.opera.com/docs/changelogs/unix/1101/
- 46036 vdb-entry
- http://www.opera.com/docs/changelogs/mac/1101/
- oval:org.mitre.oval:def:12045 vdb-entry signature
- 70727 vdb-entry
- 43023 third-party-advisory