CVE-2005-3007

Opera < 8.50 - Content Type Spoofing via Trailing Dot in Filename

Title source: llm

Description

Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow remote attackers to trick users into processing dangerous content.

References (10)

Core 10

Core References

Broken Link vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2005/1789

Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/14880

Broken Link, Patch x_refsource_misc

http://secunia.com/secunia_research/2005-42/advisory/

Broken Link x_refsource_confirm

http://www.opera.com/docs/changelogs/windows/850/

Broken Link x_refsource_confirm

http://www.opera.com/docs/changelogs/linux/850/

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/22337

Broken Link, Third Party Advisory, VDB Entry vendor-advisory x_refsource_suse

http://www.securityfocus.com/advisories/9339

Broken Link vdb-entry x_refsource_osvdb

http://www.osvdb.org/19509

Mailing List, Third Party Advisory mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=112724692219695&w=2

Broken Link, Patch third-party-advisory x_refsource_secunia

http://secunia.com/advisories/16645

Scores

EPSS 0.0145

EPSS Percentile 81.0%

Details

CWE

CWE-74

Status published

Products (1)

opera/opera_browser < 8.50

Published Sep 21, 2005

Tracked Since Feb 18, 2026