Nessus Plugin #14247

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Opera web browser file download extension spoofing

Family:

Windows

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Determines the version of Opera.exe

Version:

$Revision: 1.4 $

Cve_id:

-

Bugtraq_id:

9640

Xrefs:

OSVDB:3917

Description:

The remote host is using Opera - an alternative web browser.

This version contains a flaw that may allow a malicious user
to trick a user into running arbitrary code.
The issue is triggered when an malicious web site provides a file for download,
but crafts the filename in such a way that the file is executed, rather than saved.

It is possible that the flaw may allow arbitrary code execution resulting in a
loss of confidentiality, integrity, and/or availability.


Solution : Install Opera 7.50 or newer.
Risk factor : High