medium5.0
CVE-2005-2405
Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, w…
Impact
Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opera | Opera Browser | Version 8.01 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/15870
- http://securitytracker.com/id?1014592
- http://www.opera.com/linux/changelogs/802/
- http://www.securityfocus.com/bid/14402
- http://www.vupen.com/english/advisories/2005/1251
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21784
- http://secunia.com/advisories/15870
- http://securitytracker.com/id?1014592
- http://www.opera.com/linux/changelogs/802/
- http://www.securityfocus.com/bid/14402
- http://www.vupen.com/english/advisories/2005/1251
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21784