Vulnerability in Microsoft Windows

CVE-2011-0450

The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote attackers to execute arbitrary code via a crafted web site that hosts an executable file.

EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.

Affected products

Microsoft Windows
Opera Opera_browser — versions 5.0, 5.02, 5.10
N/a — versions n/a

References

vultures@jpcert.or.jp (x_refsource_CONFIRM, Vendor Advisory)
vultures@jpcert.or.jp (x_refsource_CONFIRM)
vultures@jpcert.or.jp (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
vultures@jpcert.or.jp (signature, x_refsource_OVAL, vdb-entry)
vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_OSVDB, vdb-entry)
vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)