CVE-2004-0537

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022263.htmlThird Party Advisory
http://marc.info/?l=bugtraq&m=108627581717738&w=2Mailing List
http://osvdb.org/6590Broken Link
http://secunia.com/advisories/11762Broken Link
http://security.greymagic.com/security/advisories/gm007-op/Broken Link
http://www.opera.com/linux/changelogs/751/index.dmlBroken Link
http://www.securityfocus.com/bid/10452Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16307Third Party Advisory, VDB Entry
http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022263.htmlThird Party Advisory
http://marc.info/?l=bugtraq&m=108627581717738&w=2Mailing List
http://osvdb.org/6590Broken Link
http://secunia.com/advisories/11762Broken Link
http://security.greymagic.com/security/advisories/gm007-op/Broken Link
http://www.opera.com/linux/changelogs/751/index.dmlBroken Link
http://www.securityfocus.com/bid/10452Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16307Third Party Advisory, VDB Entry

Timeline

Published: Aug 6, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-05387.5LaunchServices in Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new applications, which could allow attackers to execute a CVE-2004-053910.0The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow r CVE-2004-054010.0Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent use CVE-2004-054110.0Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handl CVE-2004-054210.0PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arb CVE-2004-054310.0Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers CVE-2004-05447.2Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.CVE-2004-05457.2LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack.CVE-2004-05475.0Buffer overflow in the ODBC driver for PostgreSQL before 7.2.1 allows remote attackers to cause a denial of service (crash).CVE-2004-05487.2Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrar CVE-2004-054910.0The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attac CVE-2004-05507.5Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." (perio