CVE-2005-3750: opera opera_browser Injection

CVSS: 7.5v2.0HighModified

Published 22-11-2005Last modified 07-08-2024

Vulnerability summary

CVE-2005-3750 is a high (CVSS 7.5) Injection vulnerability in opera opera_browser. EPSS estimates a 6.36% chance of exploitation in the next 30 days, higher than 93.5% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

6.36%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

22-11-2005
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters (backticks) in a URL that another product provides in a command line argument when launching Opera.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

6.36%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.36% on 20-09-2026

20-09-202620-10-2026

EPSS score

6.36%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Affected systems

Opera1 product

opera_browser< 8.51

1 vendor · 1 product

References

13 links

www.opera.com/docs/changelogs/linux/851/X Refsource CONFIRMBroken Link
www.novell.com/linux/security/advisories/2005_28_sr.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
secunia.com/advisories/18111Third Party AdvisoryX Refsource SECUNIABroken Link
securityreason.com/securityalert/199Third Party AdvisoryX Refsource SREASON
www.vupen.com/english/advisories/2005/2519VDB EntryX Refsource VUPENBroken Link
www.osvdb.org/21003VDB EntryX Refsource OSVDBBroken LinkPatch
securitytracker.com/id?1015253VDB EntryX Refsource SECTRACKBroken LinkPatchThird Party AdvisoryVendor Advisory
www.securityfocus.com/bid/15521VDB EntryX Refsource BIDBroken LinkPatchThird Party Advisory
www.securityfocus.com/archive/1/417393/30/0/threadedMailing ListX Refsource BUGTRAQBroken LinkThird Party AdvisoryVDB Entry
secunia.com/secunia_research/2005-57/advisory/X Refsource MISCBroken LinkPatch

Show all 13 references

secunia.com/advisories/16907Third Party AdvisoryX Refsource SECUNIABroken LinkPatch
www.gentoo.org/security/en/glsa/glsa-200512-10.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
archives.neohapsis.com/archives/fulldisclosure/2005-11/0677.htmlMailing ListX Refsource FULLDISCBroken LinkPatchVendor Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities