Opera contains a Javascript flaw that may allow an attacker to open a dialog box in front of a window displaying a trusted web site. This can allow them to make it appear that the dialog box comes from the trusted web site, which may be used to trick users into entering passwords or other sensitive information.

Upgrade to version 8.01 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1014260
• Related OSVDB ID: 17397 79192 79193 79194 79195 79196 79197 79198 79199 79200 79201 79202 79203 79204 79205 79206 79207 79208 79209 79210 79211 79212 79213
• Secunia Advisory ID: 15488
• CVE ID: 2005-2273 (see also: NVD)
• Generic Exploit URL: http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/
• Other Advisory URL: http://secunia.com/secunia_research/2005-8/advisory/
  http://www.microsoft.com/technet/security/advisory/902333.mspx
  http://www.us-cert.gov/cas/bulletins/SB05-173.html
• Generic Informational URL: http://www.eweek.com/article2/0,1759,1830025,00.asp

Unknown or Incomplete