bitlance winter has discovered a vulnerability in the Opera browser, which potentially can be exploited by malicious people to conduct phishing attacks against a user.

The problem is that Opera fails to update the address bar if a web page is opened using the "window.open" function and then "replaced" using the "location.replace" function. This causes Opera to display the URL of the first website while loading the content of the second website.

This has been confirmed using Opera version 7.53.

This is a variant of the following issues:
SA12028
SA11901
SA11532

NOTE: A PoC (Proof of Concept) exploit is available.

Solution
Update to version 7.54.
Further details available to Secunia VIM customers

Provided and/or discovered by
bitlance winter

Changelog
Further details available to Secunia VIM customers

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers