QwikSec

Security Database

CVE

CWE

Training

CVE-2004-2083

Published: May 19, 2005

Modified: Aug 8, 2024

PUBLISHED

Description

Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://secunia.com/Internet_Explorer_File_Download_Extension_Spoofing_Test/

x_refsource_MISC

opera-cslid-extension-spoof(21698)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_OSVDB

third-party-advisory

x_refsource_SECUNIA

http://www.opera.com/docs/changelogs/windows/750b1/

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.