VULNERABILITY INTELLIGENCE

CVE-2005-2405

CVSS score5 MEDIUM
EPSS probability2.78%
CISA KEVNot currently listed
Published2005-08-01
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references