Description
The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote attackers to execute arbitrary code via a crafted web site that hosts an executable file.
References
- http://www.opera.com/support/kb/view/985/
- http://www.opera.com/docs/changelogs/windows/1101/
- ADV-2011-0231 vdb-entry
- oval:org.mitre.oval:def:12369 vdb-entry signature
- JVNDB-2011-000010 third-party-advisory
- 70726 vdb-entry
- JVN#33880169 third-party-advisory
- 43023 third-party-advisory