Description
Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow remote attackers to trick users into processing dangerous content.
References
- ADV-2005-1789 vdb-entry
- 14880 vdb-entry
- http://secunia.com/secunia_research/2005-42/advisory/
- http://www.opera.com/docs/changelogs/windows/850/
- http://www.opera.com/docs/changelogs/linux/850/
- opera-filename-spoofing(22337) vdb-entry
- SuSE-SA:2005:057 vendor-advisory
- 19509 vdb-entry
- 20050920 Secunia Research: Opera Mail Client Attachment Spoofing and Script Insertion mailing-list
- 16645 third-party-advisory