PT-2005-3319 · Opera · Opera

Published 2005-07-28 · Updated 2022-02-28 · CVE-2005-2405

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera version 8.01

Description The issue arises when the "Arial Unicode MS" font is installed, and Opera does not properly handle extended ASCII characters in the file download dialog box. This allows remote attackers to spoof file extensions, which could trick users into executing arbitrary code.

Recommendations For Opera version 8.01, consider removing or disabling the "Arial Unicode MS" font to mitigate the risk of file extension spoofing.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2005-2405

Affected Products

Opera

References · 10

• http://secunia.com/advisories/15870 · Patch
• http://opera.com/linux/changelogs/802 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-2405 · Security Note
• http://frsirt.com/english/advisories/2005/1251 · Note
• http://xforce.iss.net/xforce/xfdb/21784 · Note
• http://securityfocus.com/bid/14402 · Note
• https://t.me/cvenotify/27482 · Telegram Post
• http://vupen.com/english/advisories/2005/1251 · Note
• http://securitytracker.com/id?1014592 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21784 · Note