Lucene search

[email protected]CVE-2005-3006

HistorySep 21, 2005 - 8:03 p.m.

CVE-2005-3006

2005-09-2120:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

security

opera

mail client

vulnerability

remote attack

web script

attachment filenames

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.016 Low

EPSS

Percentile

87.0%

JSON

The mail client in Opera before 8.50 opens attached files from the user’s cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames.

CPENameOperatorVersion
opera:opera_browseropera opera browsereq4.01
opera:opera_browseropera opera browsereq7.01
opera:opera_browseropera opera browsereq7.23
opera:opera_browseropera opera browsereq2.10
opera:opera_browseropera opera browsereq7.03
opera:opera_browseropera opera browsereq7.53
opera:opera_browseropera opera browsereq4.00
opera:opera_browseropera opera browsereq5.0
opera:opera_browseropera opera browsereq5.11
opera:opera_browseropera opera browsereq3.51

CPE	Name	Operator	Version
opera:opera_browser	opera opera browser	eq	4.01
opera:opera_browser	opera opera browser	eq	7.01
opera:opera_browser	opera opera browser	eq	7.23
opera:opera_browser	opera opera browser	eq	2.10
opera:opera_browser	opera opera browser	eq	7.03
opera:opera_browser	opera opera browser	eq	7.53
opera:opera_browser	opera opera browser	eq	4.00
opera:opera_browser	opera opera browser	eq	5.0
opera:opera_browser	opera opera browser	eq	5.11
opera:opera_browser	opera opera browser	eq	3.51

Rows per page:

1-10 of 491

References

marc.info/?l=bugtraq&m=112724692219695&w=2

secunia.com/advisories/16645

secunia.com/secunia_research/2005-42/advisory/

www.opera.com/docs/changelogs/linux/850/

www.opera.com/docs/changelogs/windows/850/

www.osvdb.org/19508

www.securityfocus.com/advisories/9339

www.securityfocus.com/bid/14880

www.vupen.com/english/advisories/2005/1789

exchange.xforce.ibmcloud.com/vulnerabilities/22335

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.016 Low

EPSS

Percentile

87.0%

JSON

Related for CVE-2005-3006

suse1 nessus1