CVE-2004-2083
Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a...
CVE-2004-2083 is a low vulnerability (CVSS 2.6) in Opera Browser, published February 11, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.56%, the 85th percentile. No source names a fixed version.
- Severity
- 2.6 LowCVSS 2.0, NVD
- Exploit chance
- 2.56%EPSS, 85th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."
Exploit likelihood
Affected products
What each source reports
NVD Score used
Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."
- Record
CVE-2004-2083- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."
- Record
CVE-2004-2083- Updated
- 2026-11-02
EUVDEUVD-2004-2075No score
Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."
- Record
EUVD-2004-2075- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qqg2-xjw3-r727No score
Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a...
Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."
- Record
GHSA-qqg2-xjw3-r727- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/Internet_Explorer_File_Download_Extension_Spoofing_Test
exchange.xforce.ibmcloud.com/vulnerabilities/21698
securityfocus.com/bid/9640
osvdb.org/3917
opera.com/docs/changelogs/windows/750b1
nvd.nist.gov/vuln/detail/CVE-2004-2083
github.com/advisories/GHSA-qqg2-xjw3-r727