CVE-2011-0450 in Web Browser

Summary

The downloads manager in Opera before 11.01 on Windows does not properly determine the pathname of the filesystem-viewing application, which allows user-assisted remote attackers to execute arbitrary code via a crafted web site that hosts an executable file.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

01/14/2011

Disclosure

01/31/2011

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
4267	Opera Web Browser Clear All Passwords privileges management	269	Proof-of-Concept	Official fix	CVE-2011-0450
4266	Opera Web Browser File privileges management	269	Proof-of-Concept	Official fix	CVE-2011-0450
4265	Opera Web Browser HTTP memory corruption	119	Proof-of-Concept	Official fix	CVE-2011-0450
4264	Opera Web Browser opera: Scheme privileges management	269	Proof-of-Concept	Official fix	CVE-2011-0450
4263	Opera Web Browser Integer		Proof-of-Concept	Official fix	CVE-2011-0450

Sources

• MITRE
• NVD
• CVE Details