PT-2005-3319 · Opera · Opera

Publicado 2005-07-28 · Atualizado 2022-02-28 · CVE-2005-2405

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera version 8.01

Description The issue arises when the "Arial Unicode MS" font is installed, and Opera does not properly handle extended ASCII characters in the file download dialog box. This allows remote attackers to spoof file extensions, which could trick users into executing arbitrary code.

Recommendations For Opera version 8.01, consider removing or disabling the "Arial Unicode MS" font to mitigate the risk of file extension spoofing.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2005-2405

Produtos afetados

Opera

Referências · 10

• http://frsirt.com/english/advisories/2005/1251 · Nota
• http://secunia.com/advisories/15870 · Correção
• http://xforce.iss.net/xforce/xfdb/21784 · Nota
• http://securityfocus.com/bid/14402 · Nota
• http://opera.com/linux/changelogs/802 · Correção
• https://t.me/cvenotify/27482 · Publicação no Telegram
• http://vupen.com/english/advisories/2005/1251 · Nota
• http://securitytracker.com/id?1014592 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21784 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2405 · Nota de Segurança