CVE-2005-2405

Description

Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/21784

https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2406

http://www.vupen.com/english/advisories/2005/1251

http://www.securityfocus.com/bid/14402

http://www.opera.com/linux/changelogs/802/

http://securitytracker.com/id?1014592

http://secunia.com/advisories/15870

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS