OpenBSD VuXML: Documenting security issues in the OpenBSD Ports & Packages Collection

opera -- Data URLs with executables and misleading download dialog

Affected packages
		opera	<	7.54u2

Details

VuXML ID	fda7f504-7777-11d9-8045-080020f8e4df
Discovery	2005-01-12
Entry	2005-02-05

A data URL (RCF 2397) containing an executable file may cause Opera to mislead the user. Opera's download dialog will in some cases say "Open with NOTEPAD.EXE". But clicking "Open" will run the executable.

References

URL	http://www.opera.com/support/search/supsearch.dml?index=784