CVE-2004-1491

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec entry.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.suse.com/archive/suse-security-announce/2005-Mar/0007.htmlThird Party Advisory, Vendor Advisory
http://secunia.com/advisories/13447/Broken Link, Patch
http://www.gentoo.org/security/en/glsa/glsa-200502-17.xmlPatch, Third Party Advisory, Vendor Advisory
http://www.opera.com/linux/changelogs/754u2/Broken Link
http://www.securityfocus.com/bid/11901Broken Link, Patch, Third Party Advisory, VDB Entry
http://www.zone-h.org/advisories/read/id=6503Third Party Advisory, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18457Third Party Advisory, VDB Entry
http://lists.suse.com/archive/suse-security-announce/2005-Mar/0007.htmlThird Party Advisory, Vendor Advisory
http://secunia.com/advisories/13447/Broken Link, Patch
http://www.gentoo.org/security/en/glsa/glsa-200502-17.xmlPatch, Third Party Advisory, Vendor Advisory
http://www.opera.com/linux/changelogs/754u2/Broken Link
http://www.securityfocus.com/bid/11901Broken Link, Patch, Third Party Advisory, VDB Entry
http://www.zone-h.org/advisories/read/id=6503Third Party Advisory, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18457Third Party Advisory, VDB Entry

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004