VULNERABILITY INTELLIGENCE

CVE-2005-2407

CVSS score5.1 MEDIUM
EPSS probability2.72%
CISA KEVNot currently listed
Published2005-08-01
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P

Description

A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above a file download dialog box, then tricking the user into double-clicking on the "Run" button, aka "link hijacking".

Weakness classification

  • CWE-1021: Improper Restriction of Rendered UI Layers or Frames

Primary references