OSVDB ID: 3917 Title: Opera Browser File Download Extension Spoofing |
Info |
|
|
Dates |
||||
|
|
Description |
Opera contains a flaw that may allow a malicious user to trick a user into running arbitrary code. The issue is triggered when an malicious web site provides a file for download, but crafts the filename in such a way that the file is executed, rather than saved. It is possible that the flaw may allow arbitrary code execution resulting in a loss of confidentiality, integrity, and/or availability. |
Classification |
Location:
Remote / Network Access
Attack Type: Authentication Management, Input Manipulation Impact: Loss of Integrity, Loss of Availability Exploit: Exploit Public |
Solution |
Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround(s): Save files to disk before opening. |
Products |
|
References |
Credit |
Unknown or Incomplete |