CVE-2008-2716

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-06-16 · updated 2026-06-16
Weakness: CWE-1021

Description

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks.

Affected products

Opera Browser: before 9.5 — fixed in 9.5

How to fix

Upgrade to a fixed version: Opera Browser 9.5. Check the vendor advisory for mitigations.

References

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html
http://secunia.com/advisories/30636
http://secunia.com/advisories/30682
http://www.opera.com/docs/changelogs/linux/950/#security
http://www.opera.com/docs/changelogs/windows/950/#security
http://www.opera.com/support/search/view/885/
http://www.securityfocus.com/bid/29684
http://www.securitytracker.com/id?1020292
http://www.vupen.com/english/advisories/2008/1812
https://exchange.xforce.ibmcloud.com/vulnerabilities/43033
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00005.html
http://secunia.com/advisories/30636

Get alerted when CVE-2008-2716 or the next vulnerability affects your stack