CVEvulnerability
CVE-2004-1489
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-668
Description
Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remote attackers to gain sensitive information, such as user names and the installation directory.
Affected configurations
• opera opera browser (<= 7.54)
Related
Weakness · CWE (1)
- CWE-668 Exposure of Resource to Wrong Sphere weakness
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029044.html Exploit
- http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml Patch, Third Party Advisory
- http://www.opera.com/linux/changelogs/754u1/ Broken Link
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029044.html Exploit
- http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml Patch, Third Party Advisory
- http://www.opera.com/linux/changelogs/754u1/ Broken Link