Opera Browser – Scroll Information Leakage

In Opera Browser, “scrollTop” and “scrollLeft” properties of a frame are accessible through the main page. This may lead to cross site information leakage.

Tested Platform: Opera <= 10.54 AND 10.60 RC (Build 3443)

Proof of Concept:

http://0me.me/demo/opera_scroll_leak/test_scroll.html

UPDATE:
Why is it really an issue?

This entry was posted in My Advisories

Creation date: June 30, 2010

IIS5.1 Directory Authentication Bypass by using “:$I30:$Index_Allocation”

Cross Site URL Hijacking by using Error Object in Mozilla Firefox