CVE-2005-2407

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-2407
A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above a file download dialog box, then tricking the user into double-clicking on the "Run" button, aka "link hijacking".

5.1 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability : 4.9 / Impact : 6.4

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://secunia.com/advisories/15781 Broken Link Patch Vendor Advisory
http://secunia.com/secunia_research/2005-19/advisory/ Broken Link
http://securitytracker.com/id?1015353 Broken Link Third Party Advisory VDB Entry
http://www.opera.com/linux/changelogs/802/ Broken Link Patch
http://www.securityfocus.com/bid/15835 Broken Link Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2005/1251 Broken Link
http://secunia.com/advisories/15781 Broken Link Patch Vendor Advisory
http://secunia.com/secunia_research/2005-19/advisory/ Broken Link
http://securitytracker.com/id?1015353 Broken Link Third Party Advisory VDB Entry
http://www.opera.com/linux/changelogs/802/ Broken Link Patch
http://www.securityfocus.com/bid/15835 Broken Link Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2005/1251 Broken Link
Configurations

Configuration 1 (hide)

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
History

20 Nov 2024, 23:59

Type Values Removed Values Added
References () http://secunia.com/advisories/15781 - Broken Link, Patch, Vendor Advisory () http://secunia.com/advisories/15781 - Broken Link, Patch, Vendor Advisory
References () http://secunia.com/secunia_research/2005-19/advisory/ - Broken Link () http://secunia.com/secunia_research/2005-19/advisory/ - Broken Link
References () http://securitytracker.com/id?1015353 - Broken Link, Third Party Advisory, VDB Entry () http://securitytracker.com/id?1015353 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.opera.com/linux/changelogs/802/ - Broken Link, Patch () http://www.opera.com/linux/changelogs/802/ - Broken Link, Patch
References () http://www.securityfocus.com/bid/15835 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/15835 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.vupen.com/english/advisories/2005/1251 - Broken Link () http://www.vupen.com/english/advisories/2005/1251 - Broken Link

28 Feb 2022, 16:29

Type Values Removed Values Added
CPE cpe:2.3:a:opera_software:opera_web_browser:8.01:*:*:*:*:*:*:* cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other CWE-1021
CVSS v2 : 2.6
v3 : unknown 		v2 : 5.1
v3 : unknown
References (MISC) http://secunia.com/secunia_research/2005-19/advisory/ - (MISC) http://secunia.com/secunia_research/2005-19/advisory/ - Broken Link
References (BID) http://www.securityfocus.com/bid/15835 - (BID) http://www.securityfocus.com/bid/15835 - Broken Link, Third Party Advisory, VDB Entry
References (CONFIRM) http://www.opera.com/linux/changelogs/802/ - Patch (CONFIRM) http://www.opera.com/linux/changelogs/802/ - Broken Link, Patch
References (SECUNIA) http://secunia.com/advisories/15781 - Patch, Vendor Advisory (SECUNIA) http://secunia.com/advisories/15781 - Broken Link, Patch, Vendor Advisory
References (SECTRACK) http://securitytracker.com/id?1015353 - (SECTRACK) http://securitytracker.com/id?1015353 - Broken Link, Third Party Advisory, VDB Entry
References (VUPEN) http://www.vupen.com/english/advisories/2005/1251 - (VUPEN) http://www.vupen.com/english/advisories/2005/1251 - Broken Link
Information

Published : 2005-08-01 04:00

Updated : 2024-11-20 23:59

NVD link : CVE-2005-2407

Mitre link : CVE-2005-2407

CVE.ORG link : CVE-2005-2407

JSON object : View

Products Affected

opera

  • opera_browser
CWE
CWE-1021

Improper Restriction of Rendered UI Layers or Frames