Vulnerability-Lookup

CVE-2007-3819 (GCVE-0-2007-3819)

Vulnerability from cvelistv5 – Published: 2007-07-17 01:00 – Updated: 2024-08-07 14:28

Summary

Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2341 records in the last 180 days details

References

13 references

URL	Tags
http://alt.swiecki.net/oper1.html	x_refsource_MISC
http://www.vupen.com/english/advisories/2007/2537	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/archive/1/473782/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/26074	third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/38122	vdb-entryx_refsource_OSVDB
http://www.securitytracker.com/id?1018397	vdb-entryx_refsource_SECTRACK
http://security.gentoo.org/glsa/glsa-200708-17.xml	vendor-advisoryx_refsource_GENTOO
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/archive/1/473703/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/26545	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/24917	vdb-entryx_refsource_BID
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://securityreason.com/securityalert/2891	third-party-advisoryx_refsource_SREASON

Date Public

2007-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:28:52.493Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://alt.swiecki.net/oper1.html"
          },
          {
            "name": "ADV-2007-2537",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2537"
          },
          {
            "name": "20070716 Re: Opera/Konqueror: data: URL scheme address bar spoofing",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/473782/100/0/threaded"
          },
          {
            "name": "26074",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26074"
          },
          {
            "name": "38122",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/38122"
          },
          {
            "name": "1018397",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018397"
          },
          {
            "name": "GLSA-200708-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
          },
          {
            "name": "opera-konqueror-addressbar-spoofing(35430)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35430"
          },
          {
            "name": "20070713 Opera/Konqueror: data: URL scheme address bar spoofing",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/473703/100/0/threaded"
          },
          {
            "name": "26545",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26545"
          },
          {
            "name": "24917",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24917"
          },
          {
            "name": "SUSE-SR:2007:015",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
          },
          {
            "name": "2891",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/2891"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://alt.swiecki.net/oper1.html"
        },
        {
          "name": "ADV-2007-2537",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2537"
        },
        {
          "name": "20070716 Re: Opera/Konqueror: data: URL scheme address bar spoofing",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/473782/100/0/threaded"
        },
        {
          "name": "26074",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26074"
        },
        {
          "name": "38122",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/38122"
        },
        {
          "name": "1018397",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018397"
        },
        {
          "name": "GLSA-200708-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
        },
        {
          "name": "opera-konqueror-addressbar-spoofing(35430)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35430"
        },
        {
          "name": "20070713 Opera/Konqueror: data: URL scheme address bar spoofing",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/473703/100/0/threaded"
        },
        {
          "name": "26545",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26545"
        },
        {
          "name": "24917",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24917"
        },
        {
          "name": "SUSE-SR:2007:015",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
        },
        {
          "name": "2891",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/2891"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3819",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://alt.swiecki.net/oper1.html",
              "refsource": "MISC",
              "url": "http://alt.swiecki.net/oper1.html"
            },
            {
              "name": "ADV-2007-2537",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2537"
            },
            {
              "name": "20070716 Re: Opera/Konqueror: data: URL scheme address bar spoofing",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/473782/100/0/threaded"
            },
            {
              "name": "26074",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26074"
            },
            {
              "name": "38122",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/38122"
            },
            {
              "name": "1018397",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018397"
            },
            {
              "name": "GLSA-200708-17",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
            },
            {
              "name": "opera-konqueror-addressbar-spoofing(35430)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35430"
            },
            {
              "name": "20070713 Opera/Konqueror: data: URL scheme address bar spoofing",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/473703/100/0/threaded"
            },
            {
              "name": "26545",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26545"
            },
            {
              "name": "24917",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24917"
            },
            {
              "name": "SUSE-SR:2007:015",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
            },
            {
              "name": "2891",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/2891"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3819",
    "datePublished": "2007-07-17T01:00:00.000Z",
    "dateReserved": "2007-07-16T00:00:00.000Z",
    "dateUpdated": "2024-08-07T14:28:52.493Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-3819",
      "date": "2026-10-18",
      "epss": "0.02002",
      "percentile": "0.80453"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F5ECA190-D7D3-4248-A61E-0D87E67E3D31",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed."
          },
          {
            "lang": "es",
            "value": "Opera 9.21 permite a atacantes remotos falsificar el esquema URI data: en la barra de direcciones mediante un URI largo con espacios en blanco, lo cual evitar que el inicio del URI sea mostrado."
          }
        ],
        "id": "CVE-2007-3819",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "NONE",
                "baseScore": 5.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": true
            }
          ]
        },
        "published": "2007-07-17T01:30:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://alt.swiecki.net/oper1.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://osvdb.org/38122"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/26074"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/26545"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://securityreason.com/securityalert/2891"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/473703/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/473782/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/24917"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securitytracker.com/id?1018397"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2007/2537"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35430"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://alt.swiecki.net/oper1.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://osvdb.org/38122"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/26074"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26545"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securityreason.com/securityalert/2891"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/473703/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/473782/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/24917"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id?1018397"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2007/2537"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35430"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

CERTA-2007-AVI-363

Vulnerability from certfr_avis - Published: 2007-08-16 - Updated: 2007-08-27

Deux vulnérabilités dans Opera permettent à une personne malintentionnée d'exécuter du code arbitraire à distance ou d'usurper le contenu de la barre de navigation de l'application.

Description

Une faille a été identifiée dans Opera, due à une erreur non spécifiée lors du traitement de code Javascript. Une personne peut ainsi exécuter du code arbitraire à distance sur le poste d'un utilisateur visitant une page web spécifiquement conçue.

Une seconde vulnérabilité dans Opera est causée par une erreur dans le traitement des URI (Universal Ressource Identifier) de type data:. Elle permet à un utilisateur malintentionné d'usurper le contenu de la barre de navigation au moyen d'une URI speécialement construite.

Solution

La version 9.23 d'Opera corrige ce problème (cf. section Documentation).

Opera versions antérieures à 9.23.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

FKIE_CVE-2007-3819

Vulnerability from fkie_nvd - Published: 2007-07-17 01:30 - Updated: 2026-06-16 22:42

Severity

Summary

Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.

References

URL	Tags
cve@mitre.org	http://alt.swiecki.net/oper1.html
cve@mitre.org	http://osvdb.org/38122
cve@mitre.org	http://secunia.com/advisories/26074	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/26545
cve@mitre.org	http://security.gentoo.org/glsa/glsa-200708-17.xml
cve@mitre.org	http://securityreason.com/securityalert/2891
cve@mitre.org	http://www.novell.com/linux/security/advisories/2007_15_sr.html
cve@mitre.org	http://www.securityfocus.com/archive/1/473703/100/0/threaded
cve@mitre.org	http://www.securityfocus.com/archive/1/473782/100/0/threaded
cve@mitre.org	http://www.securityfocus.com/bid/24917
cve@mitre.org	http://www.securitytracker.com/id?1018397
cve@mitre.org	http://www.vupen.com/english/advisories/2007/2537
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/35430
af854a3a-2127-422b-91ae-364da2661108	http://alt.swiecki.net/oper1.html
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/38122
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/26074	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/26545
af854a3a-2127-422b-91ae-364da2661108	http://security.gentoo.org/glsa/glsa-200708-17.xml
af854a3a-2127-422b-91ae-364da2661108	http://securityreason.com/securityalert/2891
af854a3a-2127-422b-91ae-364da2661108	http://www.novell.com/linux/security/advisories/2007_15_sr.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/473703/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/473782/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/24917
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1018397
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/2537
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/35430

Impacted products

	Vendor	Product	Version
	opera	opera_browser	9.21

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5ECA190-D7D3-4248-A61E-0D87E67E3D31",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed."
    },
    {
      "lang": "es",
      "value": "Opera 9.21 permite a atacantes remotos falsificar el esquema URI data: en la barra de direcciones mediante un URI largo con espacios en blanco, lo cual evitar que el inicio del URI sea mostrado."
    }
  ],
  "id": "CVE-2007-3819",
  "lastModified": "2026-06-16T22:42:47.607",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2007-07-17T01:30:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://alt.swiecki.net/oper1.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/38122"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/26074"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26545"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securityreason.com/securityalert/2891"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/473703/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/473782/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/24917"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1018397"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/2537"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35430"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://alt.swiecki.net/oper1.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/38122"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/26074"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26545"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/2891"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/473703/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/473782/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/24917"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1018397"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/2537"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35430"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-QR8G-F6QC-9J77

Vulnerability from github – Published: 2022-05-01 18:17 – Updated: 2022-05-01 18:17

Details

Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-3819"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-07-17T01:30:00Z",
    "severity": "MODERATE"
  },
  "details": "Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.",
  "id": "GHSA-qr8g-f6qc-9j77",
  "modified": "2022-05-01T18:17:41Z",
  "published": "2022-05-01T18:17:41Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3819"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35430"
    },
    {
      "type": "WEB",
      "url": "http://alt.swiecki.net/oper1.html"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/38122"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26074"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26545"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
    },
    {
      "type": "WEB",
      "url": "http://securityreason.com/securityalert/2891"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/473703/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/473782/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/24917"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1018397"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/2537"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2007-3819

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.

Aliases

CVE-2007-3819

Aliases

CVE-2007-3819

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2007-3819",
    "description": "Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.",
    "id": "GSD-2007-3819",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-3819.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-3819"
      ],
      "details": "Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed.",
      "id": "GSD-2007-3819",
      "modified": "2023-12-13T01:21:41.972861Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2007-3819",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://alt.swiecki.net/oper1.html",
            "refsource": "MISC",
            "url": "http://alt.swiecki.net/oper1.html"
          },
          {
            "name": "ADV-2007-2537",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/2537"
          },
          {
            "name": "20070716 Re: Opera/Konqueror: data: URL scheme address bar spoofing",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/473782/100/0/threaded"
          },
          {
            "name": "26074",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26074"
          },
          {
            "name": "38122",
            "refsource": "OSVDB",
            "url": "http://osvdb.org/38122"
          },
          {
            "name": "1018397",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1018397"
          },
          {
            "name": "GLSA-200708-17",
            "refsource": "GENTOO",
            "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
          },
          {
            "name": "opera-konqueror-addressbar-spoofing(35430)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35430"
          },
          {
            "name": "20070713 Opera/Konqueror: data: URL scheme address bar spoofing",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/473703/100/0/threaded"
          },
          {
            "name": "26545",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26545"
          },
          {
            "name": "24917",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/24917"
          },
          {
            "name": "SUSE-SR:2007:015",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
          },
          {
            "name": "2891",
            "refsource": "SREASON",
            "url": "http://securityreason.com/securityalert/2891"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:opera:opera_browser:9.21:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3819"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://alt.swiecki.net/oper1.html",
              "refsource": "MISC",
              "tags": [],
              "url": "http://alt.swiecki.net/oper1.html"
            },
            {
              "name": "26074",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/26074"
            },
            {
              "name": "GLSA-200708-17",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200708-17.xml"
            },
            {
              "name": "SUSE-SR:2007:015",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2007_15_sr.html"
            },
            {
              "name": "24917",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/24917"
            },
            {
              "name": "1018397",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1018397"
            },
            {
              "name": "26545",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/26545"
            },
            {
              "name": "2891",
              "refsource": "SREASON",
              "tags": [],
              "url": "http://securityreason.com/securityalert/2891"
            },
            {
              "name": "ADV-2007-2537",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/2537"
            },
            {
              "name": "38122",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/38122"
            },
            {
              "name": "opera-konqueror-addressbar-spoofing(35430)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35430"
            },
            {
              "name": "20070716 Re: Opera/Konqueror: data: URL scheme address bar spoofing",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/473782/100/0/threaded"
            },
            {
              "name": "20070713 Opera/Konqueror: data: URL scheme address bar spoofing",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/473703/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2018-10-15T21:31Z",
      "publishedDate": "2007-07-17T01:30Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2007-3819 (GCVE-0-2007-3819)

CERTA-2007-AVI-363

Description

Solution

FKIE_CVE-2007-3819

GHSA-QR8G-F6QC-9J77

GSD-2007-3819

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour