{"id":"CVE-2005-2405","aliases":["EUVD-2005-2406","GHSA-hcfh-r4fm-gpgm"],"status":"published","title":"Opera 8.01, when the \"Arial Unicode MS\" font (ARIALUNI.TTF) is installed, does not properly...","description":"Opera 8.01, when the \"Arial Unicode MS\" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02779,"percentile":0.86464,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2005-07-28T04:00:00Z","modified":"2026-06-16T22:14:49Z","products":[{"vendor":"opera","product":"opera_browser"}],"references":[{"url":"http://secunia.com/advisories/15870","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/14402","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.opera.com/linux/changelogs/802/","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Patch"]},{"url":"http://www.vupen.com/english/advisories/2005/1251","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21784","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1014592","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2405"},{"url":"http://www.opera.com/linux/changelogs/802"},{"url":"https://github.com/advisories/GHSA-hcfh-r4fm-gpgm"}],"sources":{"cve":[{"id":"CVE-2005-2405","description":"Opera 8.01, when the \"Arial Unicode MS\" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.","status":"published","published":"2005-07-28T04:00:00Z","modified":"2024-08-07T22:22:49.133Z","updated_at":"2026-11-02T14:33:37.840038Z"}],"euvd":[{"id":"EUVD-2005-2406","description":"Opera 8.01, when the \"Arial Unicode MS\" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.","status":"published","published":"2005-07-28T04:00:00Z","modified":"2024-08-07T22:22:49Z","updated_at":"2026-11-03T01:15:30.973855Z"}],"ghsa":[{"id":"GHSA-hcfh-r4fm-gpgm","title":"Opera 8.01, when the \"Arial Unicode MS\" font (ARIALUNI.TTF) is installed, does not properly...","description":"Opera 8.01, when the \"Arial Unicode MS\" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.","status":"published","published":"2022-05-01T02:07:54Z","modified":"2025-04-03T04:15:47Z","cwes":["CWE-20"],"updated_at":"2026-11-02T15:00:42.132742Z"}],"nvd":[{"id":"CVE-2005-2405","description":"Opera 8.01, when the \"Arial Unicode MS\" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.","status":"published","published":"2005-08-01T04:00:00Z","modified":"2026-06-16T22:14:49.78Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:00:56.147496Z"}]}}