CVE-2004-0537

high

Description

Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16307

http://marc.info/?l=bugtraq&m=108627581717738&w=2

http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022263.html

Details

Source: Mitre, NVD

Published: 2004-08-06

Updated: 2022-02-28

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Severity: High