CVE

Id
14212  
CVE No.
CVE-2005-3006  
Status
Candidate  
Description
The mail client in Opera before 8.50 opens attached files from the user"s cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames.  
Phase
Assigned (20050921)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
105635 14212 CVE-2005-3006 BUGTRAQ:20050920 Secunia Research: Opera Mail Client Attachment Spoofing and Script Insertion  View
105636 14212 CVE-2005-3006 URL:http://marc.info/?l=bugtraq&m=112724692219695&w=2  View
105637 14212 CVE-2005-3006 MISC:http://secunia.com/secunia_research/2005-42/advisory/  View
105638 14212 CVE-2005-3006 CONFIRM:http://www.opera.com/docs/changelogs/linux/850/  View
105639 14212 CVE-2005-3006 CONFIRM:http://www.opera.com/docs/changelogs/windows/850/  View
105640 14212 CVE-2005-3006 SUSE:SuSE-SA:2005:057  View
105641 14212 CVE-2005-3006 URL:http://www.securityfocus.com/advisories/9339  View
105642 14212 CVE-2005-3006 BID:14880  View
105643 14212 CVE-2005-3006 URL:http://www.securityfocus.com/bid/14880  View
105644 14212 CVE-2005-3006 VUPEN:ADV-2005-1789  View
105645 14212 CVE-2005-3006 URL:http://www.vupen.com/english/advisories/2005/1789  View
105646 14212 CVE-2005-3006 OSVDB:19508  View
105647 14212 CVE-2005-3006 URL:http://www.osvdb.org/19508  View
105648 14212 CVE-2005-3006 SECUNIA:16645  View
105649 14212 CVE-2005-3006 URL:http://secunia.com/advisories/16645  View
105650 14212 CVE-2005-3006 XF:opera-mail-file-xss(22335)  View

Related JVN