CVE-2005-3750

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-22 · updated 2026-06-16
Weakness: CWE-74

Description

Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters (backticks) in a URL that another product provides in a command line argument when launching Opera.

Affected products

Opera Browser: before 8.51 — fixed in 8.51

How to fix

Upgrade to a fixed version: Opera Browser 8.51. Check the vendor advisory for mitigations.

References

http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0677.html
http://secunia.com/advisories/16907
http://secunia.com/advisories/18111
http://secunia.com/secunia_research/2005-57/advisory/
http://securityreason.com/securityalert/199
http://securitytracker.com/id?1015253
http://www.gentoo.org/security/en/glsa/glsa-200512-10.xml
http://www.novell.com/linux/security/advisories/2005_28_sr.html
http://www.opera.com/docs/changelogs/linux/851/
http://www.osvdb.org/21003
http://www.securityfocus.com/archive/1/417393/30/0/threaded
http://www.securityfocus.com/bid/15521

Get alerted when CVE-2005-3750 or the next vulnerability affects your stack