CVE-2005-2405

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-08-01 · updated 2026-06-16
Weakness: CWE-20

Description

Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.

Affected products

Opera Browser: 8.01

References

http://secunia.com/advisories/15870
http://securitytracker.com/id?1014592
http://www.opera.com/linux/changelogs/802/
http://www.securityfocus.com/bid/14402
http://www.vupen.com/english/advisories/2005/1251
https://exchange.xforce.ibmcloud.com/vulnerabilities/21784
http://secunia.com/advisories/15870
http://securitytracker.com/id?1014592
http://www.opera.com/linux/changelogs/802/
http://www.securityfocus.com/bid/14402
http://www.vupen.com/english/advisories/2005/1251
https://exchange.xforce.ibmcloud.com/vulnerabilities/21784

Get alerted when CVE-2005-2405 or the next vulnerability affects your stack