Description
The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames.
References
- ADV-2005-1789 vdb-entry
- 14880 vdb-entry
- http://secunia.com/secunia_research/2005-42/advisory/
- opera-mail-file-xss(22335) vdb-entry
- http://www.opera.com/docs/changelogs/windows/850/
- http://www.opera.com/docs/changelogs/linux/850/
- SuSE-SA:2005:057 vendor-advisory
- 20050920 Secunia Research: Opera Mail Client Attachment Spoofing and Script Insertion mailing-list
- 19508 vdb-entry
- 16645 third-party-advisory