A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above a file download dialog box, then tricking the user into double-clicking on the "Run" button, aka "link hijacking".

The remote host is running the Opera Mail Client.  This version of Opera is reported to be vulnerable to multiple remote attack vectors.  An attacker exploiting this flaw would need to be able to convince an Opera mail user to open a malicious email or attachment. Successful exploitation would result in arbitrary code being executed.

The remote host is using Opera, an alternative web browser. 

The version of Opera installed on the remote host contains several flaws.  One involves imaging dragging and could result in cross-site scripting attacks and user file retrieval.  A second may let attackers spoof the file extension in the file download dialog provided the 'Arial Unicode MS' font has been installed, which is the case with various Microsoft Office products.  And a third is a design error in the processing of mouse clicks in new browser windows that may be exploited to trick a user into downloading and executing arbitrary programs on the affected host.

The remote host is using a version of Opera that is vulnerable to a download dialog spoofing flaw.  Specifically, a malicious web site operator can create downloadable files that, upon download, appear to be innocent.  For example, the user may think that they are downloading and opening a text file when in fact they are running an executable.

ID	Name	Product	Family	Severity
3232	Opera < 8.50 Mail Client Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	medium
19312	Opera < 8.02 Multiple Vulnerabilities	Nessus	Windows	high
3153	Opera Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
800837	Opera Multiple Injection Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2005-2407

high

Tenable Plugins

medium

high

medium

high