Secunia Security Advisory – Secunia Research has discovered a vulnerability in Opera, which can be exploited by malicious people to trick users into executing malicious files. The vulnerability is caused due to the filename and the Content-Type header not being sufficiently validated before being displayed in the file download dialog. This can be exploited to spoof file types in the download dialog by passing specially crafted Content-Disposition and Content-Type headers containing dots and ASCII character code 160. Successful exploitation may result in users being tricked into executing a malicious file via the download dialog. The vulnerability has been confirmed on Opera 7.54 for Windows. Other versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35293/sa12981.txt
Source: https://packetstormsecurity.com/files/35293/Secunia-Security-Advisory-12981.html