CVEvulnerability
CVE-2004-2491
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-362
Description
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks.
Affected configurations
• opera opera browser (<= 7.53)
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
Referenced by CWE · observed example (1)
- CWE-368 Context Switching Race Condition weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1056.html Broken Link, Exploit
- http://secunia.com/advisories/12162 Broken Link, Patch
- http://www.opera.com/windows/changelogs/754/ Broken Link, Patch
- http://www.osvdb.org/8317 Broken Link, Exploit
- http://www.securityfocus.com/bid/10810 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16816 Third Party Advisory, VDB Entry
- http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1056.html Broken Link, Exploit
- http://secunia.com/advisories/12162 Broken Link, Patch
- http://www.opera.com/windows/changelogs/754/ Broken Link, Patch
- http://www.osvdb.org/8317 Broken Link, Exploit
- http://www.securityfocus.com/bid/10810 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16816 Third Party Advisory, VDB Entry