CVE-2005-3007

Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow remote attackers to trick users into processing dangerous content.

• CWE-74

• http://marc.info/?l=bugtraq&m=112724692219695&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/16645Broken Link, Patch
• http://secunia.com/secunia_research/2005-42/advisory/Broken Link, Patch
• http://www.opera.com/docs/changelogs/linux/850/Broken Link
• http://www.opera.com/docs/changelogs/windows/850/Broken Link
• http://www.osvdb.org/19509Broken Link
• http://www.securityfocus.com/advisories/9339Broken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/14880Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2005/1789Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22337Third Party Advisory, VDB Entry
• http://marc.info/?l=bugtraq&m=112724692219695&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/16645Broken Link, Patch
• http://secunia.com/secunia_research/2005-42/advisory/Broken Link, Patch
• http://www.opera.com/docs/changelogs/linux/850/Broken Link
• http://www.opera.com/docs/changelogs/windows/850/Broken Link
• http://www.osvdb.org/19509Broken Link
• http://www.securityfocus.com/advisories/9339Broken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/14880Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2005/1789Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22337Third Party Advisory, VDB Entry

Published

Sep 21, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3001Unspecified vulnerability in the "tl" driver in Solaris 10 a…
• CVE-2005-3002Multi-Computer Control System (MCCS) 1.0 allows remote attac…
• CVE-2005-3003SQL injection vulnerability in index.php in NooTopList 1.0.0…
• CVE-2005-3004SQL injection vulnerability in Interakt MX Shop 3.2.0 allows…
• CVE-2005-3005Helpdesk Software Hesk allows remote attackers to bypass aut…
• CVE-2005-3006The mail client in Opera before 8.50 opens attached files fr…
• CVE-2005-3008Tofu 0.2 allows remote attackers to execute arbitrary Python…
• CVE-2005-3009Cross-site scripting (XSS) vulnerability in CuteNews allows …
• CVE-2005-3010Direct static code injection vulnerability in the flood prot…
• CVE-2005-3011The sort_offline function for texindex in texinfo 4.8 and ea…
• CVE-2005-3012The MasterDataCD::createImage function in masterdatacd.cpp f…
• CVE-2005-3013Buffer overflow in liby2util in Yet another Setup Tool (YaST…