OSVDB ID: 84448 Title: Opera Small Window Download Dialog Box Display Bypass |
Info |
|
|
Dates |
||||
|
|
Description |
Opera contains a flaw that is triggered when the download dialog box is allowed to be displayed within an excessively small window. This may allow a context-dependent attacker to effectively make the download box not appear to the user, which may allow them to more easily trick the user into downloading an arbitrary file by convincing them to enter a series of keystrokes that will approve the download. |
Classification |
Location:
Context Dependent
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: Upgrade Exploit: Exploit Private Disclosure: Vendor Verified, Coordinated Disclosure OSVDB: Web Related |
Solution |
Upgrade to version 11.66 for Mac or version 12.01 for all platforms or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |