CVE-2004-2491
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar...
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks.
Exploit likelihood
What each source reports
NVD Score used
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks.
- Record
CVE-2004-2491- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks.
- Record
CVE-2004-2491- Updated
- 2026-11-02
EUVDEUVD-2004-2482 No score
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks.
- Record
EUVD-2004-2482- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6rch-h7pj-5838 No score
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar...
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks.
- Record
GHSA-6rch-h7pj-5838- Weakness
- CWE-362
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Opera Web Browser 7.53 - Location Replace URI Obfuscation | 2004-07-27 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-2491 is a low vulnerability (CVSS 2.6) in Opera Browser, published December 31, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.32%, the 93rd percentile. No source names a fixed version.