Description
Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for user-assisted remote attackers to trick users into downloading and executing arbitrary files via a download dialog located under other windows.
References
- opera-content-window-code-exec(74503) vdb-entry
- http://www.opera.com/docs/changelogs/mac/1162/
- http://www.opera.com/docs/changelogs/windows/1162/
- openSUSE-SU-2012:0610 vendor-advisory
- http://www.opera.com/docs/changelogs/unix/1162/
- 80621 vdb-entry
- 48535 third-party-advisory
- http://www.opera.com/support/kb/view/1011/