Vulnerability Details CVE-2004-1490
Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces (ASCII character code 160) in the (1) Content-Disposition or (2) Content-Type headers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.3%
CVSS Severity
CVSS v2 Score 2.6
References
- http://secunia.com/advisories/12981
- http://secunia.com/secunia_research/2004-19/advisory/
- http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml
- http://www.opera.com/linux/changelogs/754u1/
- http://www.securityfocus.com/bid/11883
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18423
- http://secunia.com/advisories/12981
- http://secunia.com/secunia_research/2004-19/advisory/
- http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml
- http://www.opera.com/linux/changelogs/754u1/
- http://www.securityfocus.com/bid/11883
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18423
Products affected by CVE-2004-1490
-
cpe:2.3:a:opera:opera_browser:-
-
cpe:2.3:a:opera:opera_browser:1.00
-
cpe:2.3:a:opera:opera_browser:2.00
-
cpe:2.3:a:opera:opera_browser:2.10
-
cpe:2.3:a:opera:opera_browser:2.12
-
cpe:2.3:a:opera:opera_browser:3.00
-
cpe:2.3:a:opera:opera_browser:3.10
-
cpe:2.3:a:opera:opera_browser:3.21
-
cpe:2.3:a:opera:opera_browser:3.50
-
cpe:2.3:a:opera:opera_browser:3.51
-
cpe:2.3:a:opera:opera_browser:3.60
-
cpe:2.3:a:opera:opera_browser:3.61
-
cpe:2.3:a:opera:opera_browser:3.62
-
cpe:2.3:a:opera:opera_browser:4.00
-
cpe:2.3:a:opera:opera_browser:4.01
-
cpe:2.3:a:opera:opera_browser:4.02
-
cpe:2.3:a:opera:opera_browser:5.0
-
cpe:2.3:a:opera:opera_browser:5.02
-
cpe:2.3:a:opera:opera_browser:5.10
-
cpe:2.3:a:opera:opera_browser:5.11
-
cpe:2.3:a:opera:opera_browser:5.12
-
cpe:2.3:a:opera:opera_browser:6.0
-
cpe:2.3:a:opera:opera_browser:6.01
-
cpe:2.3:a:opera:opera_browser:6.02
-
cpe:2.3:a:opera:opera_browser:6.03
-
cpe:2.3:a:opera:opera_browser:6.04
-
cpe:2.3:a:opera:opera_browser:6.05
-
cpe:2.3:a:opera:opera_browser:6.06
-
cpe:2.3:a:opera:opera_browser:6.1
-
cpe:2.3:a:opera:opera_browser:6.10
-
cpe:2.3:a:opera:opera_browser:6.11
-
cpe:2.3:a:opera:opera_browser:6.12
-
cpe:2.3:a:opera:opera_browser:7.0
-
cpe:2.3:a:opera:opera_browser:7.01
-
cpe:2.3:a:opera:opera_browser:7.02
-
cpe:2.3:a:opera:opera_browser:7.03
-
cpe:2.3:a:opera:opera_browser:7.10
-
cpe:2.3:a:opera:opera_browser:7.11
-
cpe:2.3:a:opera:opera_browser:7.20
-
cpe:2.3:a:opera:opera_browser:7.21
-
cpe:2.3:a:opera:opera_browser:7.22
-
cpe:2.3:a:opera:opera_browser:7.23
-
cpe:2.3:a:opera:opera_browser:7.30
-
cpe:2.3:a:opera:opera_browser:7.50
-
cpe:2.3:a:opera:opera_browser:7.51
-
cpe:2.3:a:opera:opera_browser:7.52
-
cpe:2.3:a:opera:opera_browser:7.53
-
cpe:2.3:a:opera:opera_browser:7.54