CVE-2004-1490

 

Published at: - 31-12-2004 06:00

Last modified: - 06-10-2022 02:13

Total changes: - 3

Description

Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces (ASCII character code 160) in the (1) Content-Disposition or (2) Content-Type headers.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:H/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• http://secunia.com/secunia_research/2004-19/advisory/
• http://www.opera.com/linux/changelogs/754u1/
• GLSA-200502-17-Patch, Third Party Advisory
• 11883-Broken Link, Patch, Third Party Advisory, VDB Entry
• 12981-Broken Link, Patch
• opera-file-type-spoofing(18423)-Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2004-1490

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures