CVE-2005-3006

 

Published at: - 21-09-2005 10:03

Last modified: - 06-10-2022 02:13

Total changes: - 2

Description

The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:N/I:P/A:N

 

Verification logic

 

Reference

• http://secunia.com/secunia_research/2005-42/advisory/
• 16645-Patch, Vendor Advisory
• http://www.opera.com/docs/changelogs/linux/850/
• 19508-Patch
• http://www.opera.com/docs/changelogs/windows/850/
• SuSE-SA:2005:057-
• 14880-
• ADV-2005-1789-
• 20050920 Secunia Research: Opera Mail Client Attachment Spoofing and Script Insertion-
• opera-mail-file-xss(22335)-

 

Keywords

NVD

 

CVE-2005-3006

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures