Skip to content
OpenAdvisories
Unscored CVE-2004-2659 EUVD-2004-2649GHSA-5hgg-xq5w-5m82

Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remote attackers to const…

Published Apr 29, 2006 · Updated Aug 8, 2024 · Assigned by mitre

Description

Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking Open via a request for a different mouse or keyboard action very shortly before the Open dialog appears. NOTE: this is a different issue than CVE-2005-2407.

References