Unspecified "drag-and-drop vulnerability" in Opera Web Browser before 8.50 on Windows allows "unintentional file uploads."

The remote host is using Opera, an alternative web browser. 

The installed version of Opera on the remote host contains two flaws its mail client and one in the browser.  First, message attachments are opened from the user's cache directory without any warnings, which can be exploited to execute arbitrary JavaScript within the context of 'file://'.  Second, appending an additional '.' to an attachment's filename causes the file type to be spoofed.  And third, the browser is affected by an unspecified drag-and-drop vulnerability that facilitates unintentional file uploads.

The remote host is using a version of Opera that is vulnerable to an unspecified file upload vulnerability.  An attacker exploiting this flaw would need to be able to convince a user to browse to a malicious URI.  Successful exploitation would result in the attacker executing arbitrary code on the target machine. 

The remote host is running the Opera Mail Client.  This version of Opera is reported to be vulnerable to multiple remote attack vectors.  An attacker exploiting this flaw would need to be able to convince an Opera mail user to open a malicious email or attachment. Successful exploitation would result in arbitrary code being executed.

The remote host is using a version of Opera that is vulnerable to an unspecified file upload vulnerability.  An attacker exploiting this flaw would need to be able to convince a user to browse to a malicious URI.  Successful exploitation would result in the attacker executing arbitrary code on the target machine.

ID	Name	Product	Family	Severity
19766	Opera < 8.50 Multiple Vulnerabilities	Nessus	Windows	high
3233	Opera < 8.50 Upload Flaw	Nessus Network Monitor	Web Clients	high
3232	Opera < 8.50 Mail Client Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	medium
800835	Opera < 8.50 Upload Flaw	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2005-3041

critical

Tenable Plugins

high

high

medium

high