CVE-2004-2491

N/A Unknown
Published: December 31, 2004 Modified: April 16, 2026
View on NVD

Description

A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1056.html
Source: cve@mitre.org
Broken Link Exploit
http://secunia.com/advisories/12162
Source: cve@mitre.org
Broken Link Patch
http://www.opera.com/windows/changelogs/754/
Source: cve@mitre.org
Broken Link Patch
http://www.osvdb.org/8317
Source: cve@mitre.org
Broken Link Exploit
http://www.securityfocus.com/bid/10810
Source: cve@mitre.org
Broken Link Exploit Patch Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16816
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1056.html
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Exploit
http://secunia.com/advisories/12162
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Patch
http://www.opera.com/windows/changelogs/754/
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Patch
http://www.osvdb.org/8317
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Exploit
http://www.securityfocus.com/bid/10810
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Exploit Patch Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16816
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry

12 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
10.4%
93th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-362

Affected Vendors

opera

Related CVEs

CVE-2026-4049 N/A
CVE-2026-41455 8.5
CVE-2026-41454 8.3
CVE-2026-41314 N/A
CVE-2026-41313 N/A