Opera Multiple Injection Vulnerabilities

High Log Correlation Engine Plugin ID 800837

Synopsis

The remote host may be tricked into running an executable file.

Description

The remote host is using a version of Opera that is vulnerable to a download dialog spoofing flaw. Specifically, a malicious web site operator can create downloadable files that, upon download, appear to be innocent. For example, the user may think that they are downloading and opening a text file when in fact they are running an executable.

Solution

Upgrade or patch according to vendor recommendations.

See Also

http://.opera.com

Plugin Details

Severity: High

ID: 800837

File Name: 800837.prm

Family: Web Clients

Risk Information

Risk Factor: High

CVSSv2

Base Score: 6.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:U/RC:C

Reference Information

CVE: CVE-2005-2407, CVE-2005-2405, CVE-2005-2406

BID: 15835, 14402, 14410