CVE-2005-3007

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-09-21 · updated 2026-06-16
Weakness: CWE-74

Description

Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow remote attackers to trick users into processing dangerous content.

Affected products

Opera Browser: before 8.50 — fixed in 8.50

How to fix

Upgrade to a fixed version: Opera Browser 8.50. Check the vendor advisory for mitigations.

References

http://marc.info/?l=bugtraq&m=112724692219695&w=2
http://secunia.com/advisories/16645
http://secunia.com/secunia_research/2005-42/advisory/
http://www.opera.com/docs/changelogs/linux/850/
http://www.opera.com/docs/changelogs/windows/850/
http://www.osvdb.org/19509
http://www.securityfocus.com/advisories/9339
http://www.securityfocus.com/bid/14880
http://www.vupen.com/english/advisories/2005/1789
https://exchange.xforce.ibmcloud.com/vulnerabilities/22337
http://marc.info/?l=bugtraq&m=112724692219695&w=2
http://secunia.com/advisories/16645

Get alerted when CVE-2005-3007 or the next vulnerability affects your stack