CVE-2005-3006 json
The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remot…
published 2005-09-21 21 y ago modified 2026-06-16 4 mo ago also EUVD-2005-3006
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.0%
- EPSS 2.0% chance of exploitation in 30 days, percentile 81%
- public exploits
- 0
- none known
Summary
The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames.
Patch / fix
- osvdb.org/19508 patch
- secunia.com/secunia_research/2005-42/advisory/ advisory
- secunia.com/advisories/16645 advisory
Exploit prediction
2.02% chance of exploitation in the next 30 days, higher than 81% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:P/A:N |
References
-
secunia.com
/secunia_research/2005-42/advisory/
patch, vendor-advisory
-
osvdb.org
/19508
vdb-entry, patch
-
secunia.com
/advisories/16645
third-party-advisory, patch, vendor-advisory
-
securityfocus.com
/advisories/9339
vendor-advisory
-
vupen.com
/english/advisories/2005/1789
vdb-entry
-
securityfocus.com
/bid/14880
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/22335
vdb-entry
- opera.com /docs/changelogs/windows/850/
- opera.com /docs/changelogs/linux/850/
-
marc.info
/?l=bugtraq&m=112724692219695&w=2
mailing-list
Sources
- CVE List CVE-2005-3006
- NVD CVE-2005-3006
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.