CVE-2014-1870: Medium severity Opera Opera Browser vulnerability
Published Feb 6, 2014
·Updated
Opera before 19 on Mac OS X allows user-assisted remote attackers to spoof the address bar via vectors involving a drag-and-drop operation.
Affected Software
64 affected components
Opera Opera Browser<=18.00
Opera Opera Browser=1.00
Opera Opera Browser=10.00
Opera Opera Browser=10.00-alpha
Opera Opera Browser=10.00-beta1
Opera Opera Browser=10.00-beta2
Opera Opera Browser=10.00-beta3
Opera Opera Browser=10.01
Opera Opera Browser=10.10
Opera Opera Browser=10.10-beta1
Opera Opera Browser=10.11
Opera Opera Browser=10.20-alpha
Opera Opera Browser=10.50
Opera Opera Browser=10.50-beta1
Opera Opera Browser=10.50-beta2
Opera Opera Browser=10.51
Opera Opera Browser=10.52
Opera Opera Browser=10.52-beta1
Opera Opera Browser=10.52-beta2
Opera Opera Browser=10.53
Opera Opera Browser=10.53-b
Opera Opera Browser=10.53-beta1
Opera Opera Browser=10.54
Opera Opera Browser=10.60
Opera Opera Browser=10.60-alpha
Opera Opera Browser=10.60-beta1
Opera Opera Browser=10.61
Opera Opera Browser=10.62
Opera Opera Browser=10.63
Opera Opera Browser=11.00
Opera Opera Browser=11.00-beta
Opera Opera Browser=11.01
Opera Opera Browser=11.10
Opera Opera Browser=11.10-beta
Opera Opera Browser=11.11
Opera Opera Browser=11.50
Opera Opera Browser=11.50-beta
Opera Opera Browser=11.51
Opera Opera Browser=11.52
Opera Opera Browser=11.52.1100
Opera Opera Browser=11.60
Opera Opera Browser=11.60-beta
Opera Opera Browser=11.61
Opera Opera Browser=11.62
Opera Opera Browser=11.64
Opera Opera Browser=11.65
Opera Opera Browser=11.66
Opera Opera Browser=11.67
Opera Opera Browser=12.00
Opera Opera Browser=12.00-beta
Opera Opera Browser=12.01
Opera Opera Browser=12.02
Opera Opera Browser=12.10
Opera Opera Browser=12.10-beta
Opera Opera Browser=12.11
Opera Opera Browser=12.12
Opera Opera Browser=12.13
Opera Opera Browser=12.14
Opera Opera Browser=12.15
Opera Opera Browser=15.00
Opera Opera Browser=15.00-next
Opera Opera Browser=16.00
Opera Opera Browser=17.00
Apple iOS and macOS
Any of the following
Event History
Feb 6, 2014
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
via NVD·11:55 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-1870?
The severity of CVE-2014-1870 is classified as medium due to its potential impact on the user experience and security.
2
How do I fix CVE-2014-1870?
To fix CVE-2014-1870, users should upgrade to Opera version 19 or later on Mac OS X.
3
What is the impact of CVE-2014-1870?
CVE-2014-1870 allows attackers to spoof the address bar, which can mislead users into thinking they are on a legitimate site.
4
Which versions of Opera are affected by CVE-2014-1870?
CVE-2014-1870 affects all versions of Opera prior to 19 on Mac OS X.
5
Can CVE-2014-1870 be exploited without user interaction?
Yes, CVE-2014-1870 requires user-assisted actions such as drag-and-drop to exploit the vulnerability.