Opera Web Browser Content-Disposition Header Download Dialog File Extension Spoofing Vulnerability

Bugtraq ID:	14402
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 28 2005 12:00AM
Updated:	Jul 28 2005 12:00AM
Credit:	Discovery is credited to Andreas Sandblad with Secunia.
Vulnerable:	Opera Software Opera Web Browser 8.0 1 Opera Software Opera Web Browser 8.0
Not Vulnerable:	Opera Software Opera Web Browser 8.0 2

Opera Web Browser Content-Disposition Header Download Dialog File Extension Spoofing Vulnerability

Opera Web Browser is prone to a vulnerability that can allow remote attackers to spoof file extensions through the download dialog.

An attacker may exploit this issue by crafting a malformed HTTP 'Content-Disposition' header that spoofs file extensions to trick vulnerable users into opening and executing a malicious file.

Opera Web Browser versions prior to 8.02 are affected by this issue.

Opera Web Browser Content-Disposition Header Download Dialog File Extension Spoofing Vulnerability

An exploit is not required.

Opera Web Browser Content-Disposition Header Download Dialog File Extension Spoofing Vulnerability

Solution:
The vendor has released Opera Web Browser 8.02 to address this issue.


Opera Software Opera Web Browser 8.0 1

• Opera Software Opera 8.02
  http://www.opera.com/download/

Opera Software Opera Web Browser 8.0

• Opera Software Opera 8.02
  http://www.opera.com/download/

Opera Web Browser Content-Disposition Header Download Dialog File Extension Spoofing Vulnerability

References:

• Changelog for Opera 8.02 for Windows (Opera Software)
  
• Opera Web Browser Home Page (Opera Software)