{"id":"CVE-2004-2659","aliases":["EUVD-2004-2649","GHSA-5hgg-xq5w-5m82"],"status":"published","title":"Opera offers an Open button to verify that a user wishes to execute a downloaded file, which...","description":"Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking Open via a request for a different mouse or keyboard action very shortly before the Open dialog appears.  NOTE: this is a different issue than CVE-2005-2407.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01125,"percentile":0.66496,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-362"],"published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:10:04Z","products":[{"vendor":"mozilla","product":"mozilla"},{"vendor":"opera","product":"opera_browser"}],"references":[{"url":"http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Broken Link","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-2659"},{"url":"http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs"},{"url":"https://github.com/advisories/GHSA-5hgg-xq5w-5m82"}],"sources":{"cve":[{"id":"CVE-2004-2659","description":"Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking Open via a request for a different mouse or keyboard action very shortly before the Open dialog appears.  NOTE: this is a different issue than CVE-2005-2407.","status":"published","published":"2006-04-29T10:00:00Z","modified":"2024-08-08T01:36:25.045Z","updated_at":"2026-11-02T14:34:53.357376Z"}],"euvd":[{"id":"EUVD-2004-2649","description":"Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking Open via a request for a different mouse or keyboard action very shortly before the Open dialog appears.  NOTE: this is a different issue than CVE-2005-2407.","status":"published","published":"2006-04-29T10:00:00Z","modified":"2024-08-08T01:36:25Z","updated_at":"2026-11-03T01:15:09.64087Z"}],"ghsa":[{"id":"GHSA-5hgg-xq5w-5m82","title":"Opera offers an Open button to verify that a user wishes to execute a downloaded file, which...","description":"Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking Open via a request for a different mouse or keyboard action very shortly before the Open dialog appears.  NOTE: this is a different issue than CVE-2005-2407.","status":"published","published":"2022-04-29T03:01:52Z","modified":"2025-04-03T04:07:25Z","cwes":["CWE-362"],"updated_at":"2026-11-02T15:00:40.646262Z"}],"nvd":[{"id":"CVE-2004-2659","description":"Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking Open via a request for a different mouse or keyboard action very shortly before the Open dialog appears.  NOTE: this is a different issue than CVE-2005-2407.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:10:04.71Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:00:53.133049Z"}]}}