CVE-2004-1490

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 2.6

EPSS Низкий

Описание

Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces (ASCII character code 160) in the (1) Content-Disposition or (2) Content-Type headers.

Ссылки

http://secunia.com/advisories/12981
Broken Link
Patch
http://secunia.com/secunia_research/2004-19/advisory/
Broken Link
Patch
http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml
Patch
Third Party Advisory
http://www.opera.com/linux/changelogs/754u1/
Broken Link
http://www.securityfocus.com/bid/11883
Broken Link
Patch
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/18423
Third Party Advisory
VDB Entry
http://secunia.com/advisories/12981
Broken Link
Patch
http://secunia.com/secunia_research/2004-19/advisory/
Broken Link
Patch
http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml
Patch
Third Party Advisory
http://www.opera.com/linux/changelogs/754u1/
Broken Link
http://www.securityfocus.com/bid/11883
Broken Link
Patch
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/18423
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*

Версия до 7.54 (включая)

EPSS

Процентиль: 78%

0.01133

Низкий

2.6 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-f44x-mffr-9h8r

github

почти 4 года назад