CVE-2005-2405: Opera Browser

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) is installed, does not properly handle extended ASCII characters in the file download dialog box, which allows remote attackers to spoof file extensions and possibly trick users into executing arbitrary code.

Affected products

• Opera Opera Browser: version 8.01 only

Published 2005-08-01. Last modified 2026-06-16.