CVE-2005-2405 | BDVDB-2026-11757 Detail

Description#

Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/15870
http://www.securityfocus.com/bid/14402
http://www.opera.com/linux/changelogs/802/
http://www.vupen.com/english/advisories/2005/1251
https://exchange.xforce.ibmcloud.com/vulnerabilities/21784
http://securitytracker.com/id?1014592

Exploit#

No public exploit known

History#

Version 12005-07-28Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.