Secunia Research has discovered a vulnerability in Opera, which can be exploited by malicious people to trick users into executing malicious files.

The vulnerability is caused due to the filename and the "Content-Type" header not being sufficiently validated before being displayed in the file download dialog. This can be exploited to spoof file types in the download dialog by passing specially crafted "Content-Disposition" and "Content-Type" headers containing dots and ASCII character code 160.

Successful exploitation may result in users being tricked into executing a malicious file via the download dialog.

The vulnerability has been confirmed on Opera 7.54 for Windows. Other versions may also be affected.

Solution
Update to version 7.54u1.
Further details available in Customer Area

Provided and/or discovered by
Andreas Sandblad, Secunia Research.

Changelog
Further details available in Customer Area

Original Advisory
http://secunia.com/secunia_research/2004-19/advisory/

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area