CVE-2007-1737

Opera 9.10 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2007-03-28

Last modified

2024-08-07

Affected products

• Opera Browser (Opera)

References

• http://securityreason.com/securityalert/2488
• http://www.securityfocus.com/archive/1/464041/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33488