CVE-2004-2083

Opera Browser 7.0-7.23 - File Extension Spoofing via CLSID Embedding

Title source: llm

Description

Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."

References (6)

Core 6

Core References

Broken Link, Vendor Advisory x_refsource_misc

http://secunia.com/Internet_Explorer_File_Download_Extension_Spoofing_Test/

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/21698

Broken Link, Exploit, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/9640

Broken Link vdb-entry x_refsource_osvdb

http://www.osvdb.org/3917

Broken Link, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/10760

Broken Link x_refsource_confirm

http://www.opera.com/docs/changelogs/windows/750b1/

Scores

EPSS 0.0114

EPSS Percentile 78.7%

Details

Status published

Products (1)

opera/opera_browser 7.0 - 7.23

Published Feb 11, 2004

Tracked Since Feb 18, 2026