CVE-2005-2405

Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.

• CWE-20

• http://secunia.com/advisories/15870Broken Link, Patch
• http://securitytracker.com/id?1014592Broken Link, Third Party Advisory, VDB Entry
• http://www.opera.com/linux/changelogs/802/Broken Link, Patch
• http://www.securityfocus.com/bid/14402Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2005/1251Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21784Third Party Advisory, VDB Entry
• http://secunia.com/advisories/15870Broken Link, Patch
• http://securitytracker.com/id?1014592Broken Link, Third Party Advisory, VDB Entry
• http://www.opera.com/linux/changelogs/802/Broken Link, Patch
• http://www.securityfocus.com/bid/14402Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2005/1251Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21784Third Party Advisory, VDB Entry

Published

Aug 1, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2399PHP Surveyor 0.98 allows remote attackers to trigger SQL err…
• CVE-2005-2400The inc.login.php scripts in PHPFinance 0.3 allows remote at…
• CVE-2005-2401PHP-Fusion allows remote attackers to inject arbitrary Casca…
• CVE-2005-2402Cross-site scripting (XSS) vulnerability in search.php in PH…
• CVE-2005-2403The login protocol in RealChat 3.5.1b does not use authentic…
• CVE-2005-2404SQL injection vulnerability in sendcard.php in Sendcard 3.2.…
• CVE-2005-2406Opera 8.01 allows remote attackers to conduct cross-site scr…
• CVE-2005-2407A design error in Opera 8.01 and earlier allows user-assiste…
• CVE-2005-2408Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2005-2409Format string vulnerability in util.c in nbsmtp 0.99 and ear…
• CVE-2005-2410Format string vulnerability in the nm_info_handler function …
• CVE-2005-2411Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.…