PT-2005-1516 · Opera · Opera

Michael Holzt · Published 2005-01-12 · Updated 2022-02-28 · CVE-2005-0456

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera versions prior to 7.55

Description The issue is related to the improper validation of base64 encoded binary data in a data: (RFC 2397) URL. This can cause the URL to be obscured in a download dialog, potentially allowing remote attackers to trick users into executing arbitrary code.

Recommendations For Opera versions prior to 7.55, update to version 7.55 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-0456

Affected Products

Opera

References · 8

• http://gentoo.org/security/en/glsa/glsa-200502-17.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0456 · Security Note
• http://novell.com/linux/security/advisories/2005_31_opera.html · Vendor Advisory
• http://secunia.com/advisories/13818 · Patch
• http://opera.com/linux/changelogs/754u2 · Vendor Advisory
• http://xforce.iss.net/xforce/xfdb/18867 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18867 · Note
• http://kb.cert.org/vuls/id/882926 · Note