CVE-2004-1491

EPSS 25.86%
Published 31.12.2004 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec entry.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Opera ≫ Opera Browser Version <= 7.54

Gentoo ≫ Linux

Kde ≫ Kde Version3.2.3

Suse ≫ Suse Linux Version1.0

Suse ≫ Suse Linux Version2.0

Suse ≫ Suse Linux Version3.0

Suse ≫ Suse Linux Version4.0

Suse ≫ Suse Linux Version4.2

Suse ≫ Suse Linux Version4.3

Suse ≫ Suse Linux Version4.4

Suse ≫ Suse Linux Version4.4.1

Suse ≫ Suse Linux Version5.0

Suse ≫ Suse Linux Version5.1

Suse ≫ Suse Linux Version5.2

Suse ≫ Suse Linux Version5.3

Suse ≫ Suse Linux Version6.0

Suse ≫ Suse Linux Version6.1

Suse ≫ Suse Linux Version6.1 Updatealpha

Suse ≫ Suse Linux Version6.2

Suse ≫ Suse Linux Version6.3

Suse ≫ Suse Linux Version6.3 Updatealpha

Suse ≫ Suse Linux Version6.4

Suse ≫ Suse Linux Version6.4 Updatealpha

Suse ≫ Suse Linux Version7.0

Suse ≫ Suse Linux Version7.0 Updatealpha

Suse ≫ Suse Linux Version7.1

Suse ≫ Suse Linux Version7.1 Updatealpha

Suse ≫ Suse Linux Version7.2

Suse ≫ Suse Linux Version7.3

Suse ≫ Suse Linux Version8.0

Suse ≫ Suse Linux Version8.1

Suse ≫ Suse Linux Version8.2

Suse ≫ Suse Linux Version9.0

Suse ≫ Suse Linux Version9.1

Suse ≫ Suse Linux Version9.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	25.86%	0.958

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml

Patch

Third Party Advisory

Vendor Advisory

http://lists.suse.com/archive/suse-security-announce/2005-Mar/0007.html

Third Party Advisory

Vendor Advisory

http://secunia.com/advisories/13447/

Patch

Broken Link

http://www.opera.com/linux/changelogs/754u2/

Broken Link

http://www.securityfocus.com/bid/11901

Patch

Third Party Advisory

Broken Link

VDB Entry

http://www.zone-h.org/advisories/read/id=6503

Third Party Advisory

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/18457

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2004-1491

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-1491

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-1491

EUVD