Unscored CVE-2005-2405 EUVD-2005-2406GHSA-hcfh-r4fm-gpgm

Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file do…

Published Jul 28, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.

References

15870 third-party-advisory
14402 vdb-entry
http://www.opera.com/linux/changelogs/802/
ADV-2005-1251 vdb-entry
opera-content-disposition-extension-spoofing(21784) vdb-entry
1014592 vdb-entry