CVE-2005-3007

Published: Sep 21, 2005Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow remote attackers to trick users into processing dangerous content.

Affected (1)

Products: Opera: Opera Browser

Opera

1 product

Opera Browser

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opera Opera Browser	Before 8.50

Related CWEs

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

References (20)

http://marc.info/?l=bugtraq&m=112724692219695&w=2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://secunia.com/advisories/16645

Source: cve@mitre.org

Broken LinkPatch

http://secunia.com/secunia_research/2005-42/advisory/

Source: cve@mitre.org

Broken LinkPatch

http://www.opera.com/docs/changelogs/linux/850/

Source: cve@mitre.org

Broken Link

http://www.opera.com/docs/changelogs/windows/850/

Source: cve@mitre.org

Broken Link

http://www.osvdb.org/19509

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/advisories/9339

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/14880

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2005/1789

Source: cve@mitre.org

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/22337

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://marc.info/?l=bugtraq&m=112724692219695&w=2