Opera Multiple Injection Vulnerabilities

high Log Correlation Engine Plugin ID 800837

Synopsis

The remote host may be tricked into running an executable file.

Description

The remote host is using a version of Opera that is vulnerable to a download dialog spoofing flaw. Specifically, a malicious web site operator can create downloadable files that, upon download, appear to be innocent. For example, the user may think that they are downloading and opening a text file when in fact they are running an executable.

Solution

Upgrade or patch according to vendor recommendations.

See Also

http://.opera.com

Plugin Details

Severity: High

ID: 800837

Family: Web Clients

Reference Information

CVE: CVE-2005-2405, CVE-2005-2406, CVE-2005-2407

BID: 15835, 14402, 14410