CVE-2005-2405

Опубликовано: 01 авг. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.

Ссылки

http://secunia.com/advisories/15870
Broken Link
Patch
http://securitytracker.com/id?1014592
Broken Link
Third Party Advisory
VDB Entry
http://www.opera.com/linux/changelogs/802/
Broken Link
Patch
http://www.securityfocus.com/bid/14402
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2005/1251
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/21784
Third Party Advisory
VDB Entry
http://secunia.com/advisories/15870
Broken Link
Patch
http://securitytracker.com/id?1014592
Broken Link
Third Party Advisory
VDB Entry
http://www.opera.com/linux/changelogs/802/
Broken Link
Patch
http://www.securityfocus.com/bid/14402
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2005/1251
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/21784
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01336

Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-hcfh-r4fm-gpgm

github

почти 4 года назад