CVE-2005-2405 — Improper Input Validation in Browser

CWE-20 — Improper Input Validation3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
1.3%
top 19.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Opera Browser
Timeline
PublishedAug 1
Latest updateMay 1

Description

Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: www.opera.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-hcfh-r4fm-gpgm: Opera 8↗2022-05-01
▶
CVEList
CVE-2005-2405: Opera 8↗2005-07-28
▶
CVE-2005-2405 — Improper Input Validation in Browser | cvebase