Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote malicious users to spoof file extensions and possibly trick users into executing arbitrary code.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
opera opera browser 8.01 |