CVE-2005-3006
Summary
| CVE | CVE-2005-3006 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-09-21 20:03:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames. |
Risk And Classification
Primary CVSS: v2.0 5 from [email protected]
AV:N/AC:L/Au:N/C:N/I:P/A:N
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:L/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Opera | Opera Browser | 1.00 | All | All | All |
| Application | Opera | Opera Browser | 2.00 | All | All | All |
| Application | Opera | Opera Browser | 2.10 | All | All | All |
| Application | Opera | Opera Browser | 2.10 | beta1 | All | All |
| Application | Opera | Opera Browser | 2.10 | beta2 | All | All |
| Application | Opera | Opera Browser | 2.10 | beta3 | All | All |
| Application | Opera | Opera Browser | 2.12 | All | All | All |
| Application | Opera | Opera Browser | 3.00 | All | All | All |
| Application | Opera | Opera Browser | 3.00 | beta | All | All |
| Application | Opera | Opera Browser | 3.10 | All | All | All |
| Application | Opera | Opera Browser | 3.21 | All | All | All |
| Application | Opera | Opera Browser | 3.50 | All | All | All |
| Application | Opera | Opera Browser | 3.51 | All | All | All |
| Application | Opera | Opera Browser | 3.60 | All | All | All |
| Application | Opera | Opera Browser | 3.61 | All | All | All |
| Application | Opera | Opera Browser | 3.62 | All | All | All |
| Application | Opera | Opera Browser | 3.62 | beta | All | All |
| Application | Opera | Opera Browser | 4.00 | All | All | All |
| Application | Opera | Opera Browser | 4.00 | beta2 | All | All |
| Application | Opera | Opera Browser | 4.00 | beta3 | All | All |
| Application | Opera | Opera Browser | 4.00 | beta4 | All | All |
| Application | Opera | Opera Browser | 4.00 | beta5 | All | All |
| Application | Opera | Opera Browser | 4.00 | beta6 | All | All |
| Application | Opera | Opera Browser | 4.01 | All | All | All |
| Application | Opera | Opera Browser | 4.02 | All | All | All |
| Application | Opera | Opera Browser | 5.0 | All | All | All |
| Application | Opera | Opera Browser | 5.0 | beta2 | All | All |
| Application | Opera | Opera Browser | 5.0 | beta3 | All | All |
| Application | Opera | Opera Browser | 5.0 | beta4 | All | All |
| Application | Opera | Opera Browser | 5.0 | beta5 | All | All |
| Application | Opera | Opera Browser | 5.0 | beta6 | All | All |
| Application | Opera | Opera Browser | 5.0 | beta7 | All | All |
| Application | Opera | Opera Browser | 5.0 | beta8 | All | All |
| Application | Opera | Opera Browser | 5.02 | All | All | All |
| Application | Opera | Opera Browser | 5.10 | All | All | All |
| Application | Opera | Opera Browser | 5.11 | All | All | All |
| Application | Opera | Opera Browser | 5.12 | All | All | All |
| Application | Opera | Opera Browser | 6.0 | All | All | All |
| Application | Opera | Opera Browser | 6.0 | beta1 | All | All |
| Application | Opera | Opera Browser | 6.0 | beta2 | All | All |
| Application | Opera | Opera Browser | 6.0 | tp1 | All | All |
| Application | Opera | Opera Browser | 6.0 | tp2 | All | All |
| Application | Opera | Opera Browser | 6.0 | tp3 | All | All |
| Application | Opera | Opera Browser | 6.01 | All | All | All |
| Application | Opera | Opera Browser | 6.02 | All | All | All |
| Application | Opera | Opera Browser | 6.03 | All | All | All |
| Application | Opera | Opera Browser | 6.04 | All | All | All |
| Application | Opera | Opera Browser | 6.05 | All | All | All |
| Application | Opera | Opera Browser | 6.06 | All | All | All |
| Application | Opera | Opera Browser | 6.1 | All | All | All |
| Application | Opera | Opera Browser | 6.1 | beta1 | All | All |
| Application | Opera | Opera Browser | 6.11 | All | All | All |
| Application | Opera | Opera Browser | 6.12 | All | All | All |
| Application | Opera | Opera Browser | 7.0 | All | All | All |
| Application | Opera | Opera Browser | 7.0 | beta1 | All | All |
| Application | Opera | Opera Browser | 7.0 | beta1_v2 | All | All |
| Application | Opera | Opera Browser | 7.0 | beta2 | All | All |
| Application | Opera | Opera Browser | 7.01 | All | All | All |
| Application | Opera | Opera Browser | 7.02 | All | All | All |
| Application | Opera | Opera Browser | 7.03 | All | All | All |
| Application | Opera | Opera Browser | 7.10 | All | All | All |
| Application | Opera | Opera Browser | 7.10 | beta1 | All | All |
| Application | Opera | Opera Browser | 7.11 | All | All | All |
| Application | Opera | Opera Browser | 7.11 | beta2 | All | All |
| Application | Opera | Opera Browser | 7.20 | All | All | All |
| Application | Opera | Opera Browser | 7.20 | beta7 | All | All |
| Application | Opera | Opera Browser | 7.21 | All | All | All |
| Application | Opera | Opera Browser | 7.22 | All | All | All |
| Application | Opera | Opera Browser | 7.23 | All | All | All |
| Application | Opera | Opera Browser | 7.50 | All | All | All |
| Application | Opera | Opera Browser | 7.50 | beta1 | All | All |
| Application | Opera | Opera Browser | 7.51 | All | All | All |
| Application | Opera | Opera Browser | 7.52 | All | All | All |
| Application | Opera | Opera Browser | 7.53 | All | All | All |
| Application | Opera | Opera Browser | 7.54 | All | All | All |
| Application | Opera | Opera Browser | 7.54 | update1 | All | All |
| Application | Opera | Opera Browser | 7.54 | update2 | All | All |
| Application | Opera | Opera Browser | 7.60 | All | All | All |
| Application | Opera | Opera Browser | 8.0 | All | All | All |
| Application | Opera | Opera Browser | 8.0 | beta1 | All | All |
| Application | Opera | Opera Browser | 8.0 | beta2 | All | All |
| Application | Opera | Opera Browser | 8.0 | beta3 | All | All |
| Application | Opera | Opera Browser | 8.01 | All | All | All |
| Application | Opera | Opera Browser | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Opera 8.50 for Linux Changelog | af854a3a-2127-422b-91ae-364da2661108 | www.opera.com | |
| About Secunia Research | Flexera | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Patch, Vendor Advisory |
| Secunia - Advisories - Opera Mail Client Attachment Spoofing and Script Insertion | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Patch, Vendor Advisory |
| www.osvdb.org/19508 | af854a3a-2127-422b-91ae-364da2661108 | www.osvdb.org | Patch |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Malformed Request | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| 'Secunia Research: Opera Mail Client Attachment Spoofing and Script' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Opera 8.50 for Windows Changelog | af854a3a-2127-422b-91ae-364da2661108 | www.opera.com | |
| Opera Web Browser Mail Client Multiple Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.