Sign-up

ID

VAR-201402-0303


CVE

CVE-2014-1870


TITLE

Mac OS X Run on Opera Vulnerable to address bar spoofing

Trust: 0.8

sources: JVNDB: JVNDB-2014-001346

DESCRIPTION

Opera before 19 on Mac OS X allows user-assisted remote attackers to spoof the address bar via vectors involving a drag-and-drop operation. An attacker may leverage this issue by inserting arbitrary content to spoof a URI presented to an unsuspecting user. This may lead to a false sense of trust because the victim may be presented with a URI of a seemingly trusted site while interacting with the attacker's malicious site. Opera Web Browser versions prior to 19.00 are vulnerable. It supports multi-window browsing and a customizable user interface

Trust: 1.98

sources: NVD: CVE-2014-1870 // JVNDB: JVNDB-2014-001346 // BID: 65614 // VULHUB: VHN-69809

AFFECTED PRODUCTS

vendor:operamodel:browserscope:eqversion:16.00

Trust: 1.6

vendor:operamodel:browserscope:eqversion:10.00

Trust: 1.6

vendor:operamodel:browserscope:eqversion:10.10

Trust: 1.6

vendor:operamodel:browserscope:eqversion:12.15

Trust: 1.6

vendor:operamodel:browserscope:eqversion:15.00

Trust: 1.6

vendor:operamodel:browserscope:eqversion:10.11

Trust: 1.6

vendor:operamodel:browserscope:eqversion:10.01

Trust: 1.6

vendor:operamodel:browserscope:eqversion:11.50

Trust: 1.0

vendor:operamodel:browserscope:eqversion:12.01

Trust: 1.0

vendor:operamodel:browserscope:eqversion:12.13

Trust: 1.0

vendor:operamodel:browserscope:eqversion:10.61

Trust: 1.0

vendor:operamodel:browserscope:eqversion:12.14

Trust: 1.0

vendor:operamodel:browserscope:eqversion:17.00

Trust: 1.0

vendor:operamodel:browserscope:eqversion:10.60

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.65

Trust: 1.0

vendor:operamodel:browserscope:eqversion:12.12

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.00

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.61

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.51

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.67

Trust: 1.0

vendor:operamodel:browserscope:eqversion:12.10

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.66

Trust: 1.0

vendor:operamodel:browserscope:eqversion:10.51

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.11

Trust: 1.0

vendor:operamodel:browserscope:lteversion:18.00

Trust: 1.0

vendor:operamodel:browserscope:eqversion:10.63

Trust: 1.0

vendor:operamodel:browserscope:eqversion:12.11

Trust: 1.0

vendor:operamodel:browserscope:eqversion:10.62

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.10

Trust: 1.0

vendor:operamodel:browserscope:eqversion:10.50

Trust: 1.0

vendor:operamodel:browserscope:eqversion:12.00

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.52

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.62

Trust: 1.0

vendor:operamodel:browserscope:eqversion:12.02

Trust: 1.0

vendor:operamodel:browserscope:eqversion:10.53

Trust: 1.0

vendor:operamodel:browserscope:eqversion:10.52

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.01

Trust: 1.0

vendor:operamodel:browserscope:eqversion:1.00

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.64

Trust: 1.0

vendor:operamodel:browserscope:eqversion:10.20

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.60

Trust: 1.0

vendor:operamodel:browserscope:eqversion:10.54

Trust: 1.0

vendor:operamodel:browserscope:eqversion:11.52.1100

Trust: 1.0

vendor:opera asamodel:operascope:ltversion:19

Trust: 0.8

vendor:operamodel:software opera web browserscope:eqversion:8.0

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:7.54

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:7.53

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:7.52

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:7.51

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:7.23

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:7.22

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:7.21

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:7.20

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:7.11

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:7.10

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:6.0.1

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:6.0

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:5.12

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.64

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.63

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.62

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.61

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.60

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.52

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.51

Trust: 0.3

vendor:operamodel:software opera web browser betascope:eqversion:9.50

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.5

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.27

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.26

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.25

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.24

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.23

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.22

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.21

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.20

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.10

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.02

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9.01

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:9

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:8.54

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:8.53

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:8.52

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:12

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:11.64

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:11.62

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:11.61

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:11.60

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:11.51

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:11.50

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:11.11

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:11.10

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:11.01

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:11.00

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:10.63

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:10.62

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:10.61

Trust: 0.3

vendor:operamodel:software opera web browser beta1scope:eqversion:10.60

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:10.60

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:10.54

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:10.53

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:10.52

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:10.51

Trust: 0.3

vendor:operamodel:software opera web browser beta2scope:eqversion:10.50

Trust: 0.3

vendor:operamodel:software opera web browser beta1scope:eqversion:10.50

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:10.50

Trust: 0.3

vendor:operamodel:software opera web browser beta1scope:eqversion:10.10

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:10.10

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:10.1

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:10.01

Trust: 0.3

vendor:operamodel:software opera web browser beta3scope:eqversion:10.00

Trust: 0.3

vendor:operamodel:software opera web browser beta2scope:eqversion:10.00

Trust: 0.3

vendor:operamodel:software opera web browser beta1scope:eqversion:10.00

Trust: 0.3

vendor:operamodel:software opera web browserscope:eqversion:10.00

Trust: 0.3

vendor:operamodel:web browserscope:eqversion:11.52

Trust: 0.3

sources: BID: 65614 // JVNDB: JVNDB-2014-001346 // CNNVD: CNNVD-201402-084 // NVD: CVE-2014-1870

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2014-1870
value: MEDIUM

Trust: 1.0

NVD: CVE-2014-1870
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201402-084
value: MEDIUM

Trust: 0.6

VULHUB: VHN-69809
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2014-1870
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-69809
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-69809 // JVNDB: JVNDB-2014-001346 // CNNVD: CNNVD-201402-084 // NVD: CVE-2014-1870

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

sources: NVD: CVE-2014-1870

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201402-084

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201402-084

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2014-001346

PATCH
title:Security changes and features of Opera 19url:http://blogs.opera.com/security/2014/01/security-changes-features-opera-19/
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2014-001346

EXTERNAL IDS
db:NVDid:CVE-2014-1870
Trust: 2.8
db:JVNDBid:JVNDB-2014-001346
Trust: 0.8
db:CNNVDid:CNNVD-201402-084
Trust: 0.7
db:BIDid:65614
Trust: 0.4
db:VULHUBid:VHN-69809
Trust: 0.1
sources:
            
            
            VULHUB: VHN-69809 // 
            
            
            
            BID: 65614 // 
            
            
            
            JVNDB: JVNDB-2014-001346 // 
            
            
            
            CNNVD: CNNVD-201402-084 // 
            
            
            
            NVD: CVE-2014-1870

REFERENCES
url:http://blogs.opera.com/security/2014/01/security-changes-features-opera-19/
Trust: 2.0
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-1870
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-1870
Trust: 0.8
url:http://blogs.opera.com/desktop/changelog19/
Trust: 0.3
url:http://www.opera.com/
Trust: 0.3
sources:
            
            
            VULHUB: VHN-69809 // 
            
            
            
            BID: 65614 // 
            
            
            
            JVNDB: JVNDB-2014-001346 // 
            
            
            
            CNNVD: CNNVD-201402-084 // 
            
            
            
            NVD: CVE-2014-1870

CREDITS
Jordi Chancel
Trust: 0.3
sources:
            
            
            BID: 65614

SOURCES
db:VULHUBid:VHN-69809
db:BIDid:65614
db:JVNDBid:JVNDB-2014-001346
db:CNNVDid:CNNVD-201402-084
db:NVDid:CVE-2014-1870

LAST UPDATE DATE
2024-11-23T23:12:47.531000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-69809date:2014-02-07T00:00:00
db:BIDid:65614date:2015-03-19T08:41:00
db:JVNDBid:JVNDB-2014-001346date:2014-02-10T00:00:00
db:CNNVDid:CNNVD-201402-084date:2014-02-10T00:00:00
db:NVDid:CVE-2014-1870date:2024-11-21T02:05:10.883

SOURCES RELEASE DATE
db:VULHUBid:VHN-69809date:2014-02-06T00:00:00
db:BIDid:65614date:2014-02-06T00:00:00
db:JVNDBid:JVNDB-2014-001346date:2014-02-10T00:00:00
db:CNNVDid:CNNVD-201402-084date:2014-02-10T00:00:00
db:NVDid:CVE-2014-1870date:2014-02-06T23:55:04.057