CVE-2005-2407

 

Published at: - 01-08-2005 06:00

Last modified: - 06-10-2022 02:13

Total changes: - 3

Description

A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above a file download dialog box, then tricking the user into double-clicking on the "Run" button, aka "link hijacking".

Common Vulnerability Scoring System (CVSS)

AV:N/AC:H/Au:N/C:P/I:P/A:P

 

Verification logic

 

Reference

• http://www.opera.com/linux/changelogs/802/
• 15781-Broken Link, Patch, Vendor Advisory
• http://secunia.com/secunia_research/2005-19/advisory/
• 15835-Broken Link, Third Party Advisory, VDB Entry
• 1015353-Broken Link, Third Party Advisory, VDB Entry
• ADV-2005-1251-Broken Link

 

Keywords

NVD

 

CVE-2005-2407

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures