CVE-2004-1157

Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.

• CWE-74

• http://secunia.com/advisories/13253/Broken Link, Vendor Advisory
• http://secunia.com/multiple_browsers_window_injection_vulnerability_test/Broken Link
• http://secunia.com/secunia_research/2004-13/advisory/Broken Link
• http://www.gentoo.org/security/en/glsa/glsa-200502-17.xmlThird Party Advisory
• http://secunia.com/advisories/13253/Broken Link, Vendor Advisory
• http://secunia.com/multiple_browsers_window_injection_vulnerability_test/Broken Link
• http://secunia.com/secunia_research/2004-13/advisory/Broken Link
• http://www.gentoo.org/security/en/glsa/glsa-200502-17.xmlThird Party Advisory

Published

Jan 10, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1151Multiple buffer overflows in the (1) sys32_ni_syscall and (2…
• CVE-2004-1152Buffer overflow in the mailListIsPdf function in Adobe Acrob…
• CVE-2004-1153Format string vulnerability in Adobe Acrobat Reader 6.0.0 th…
• CVE-2004-1154Integer overflow in the Samba daemon (smbd) in Samba 2.x and…
• CVE-2004-1155Internet Explorer 5.01 through 6 allows remote attackers to …
• CVE-2004-1156Mozilla before 1.7.6, and Firefox before 1.0.1, allows remot…
• CVE-2004-1158Konqueror 3.x up to 3.2.2-6, and possibly other versions, al…
• CVE-2004-1159Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2004-1160Netscape 7.x to 7.2, and possibly other versions, allows rem…
• CVE-2004-1161rssh 2.2.2 and earlier does not properly restrict programs t…
• CVE-2004-1162The unison command in scponly before 4.0 does not properly r…
• CVE-2004-1163Cisco CNS Network Registrar Central Configuration Management…