Description
Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
References
- http://www.opera.com/docs/changelogs/windows/1101/
- oval:org.mitre.oval:def:11641 vdb-entry signature
- http://www.opera.com/support/kb/view/983/
- ADV-2011-0231 vdb-entry
- http://www.opera.com/docs/changelogs/unix/1101/
- 46036 vdb-entry
- http://www.opera.com/docs/changelogs/mac/1101/
- 70729 vdb-entry
- 43023 third-party-advisory