CVE-2001-0898 Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to t...
MediumCVSS 5.0
EPSS 3.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to the domain has been opened or (2) access data via about:cache.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opera software opera web browser | <= 6.0 | No fix listed |
References
- 20011115 Several javascript vulnerabilities in Opera mailing-list
- 20011116 Re: Several javascript vulnerabilities in Opera mailing-list
- opera-java-cross-site(7567) vdb-entry
- 3553 vdb-entry