What is CVE-2005-2407?

CVE-2005-2407 is a vulnerability in Opera Browser, classified under Improper Restriction of Rendered UI Layers or Frames (Clickjacking). Published 2005-08-01.

Is CVE-2005-2407 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Opera Browser

CVE-2005-2407

A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above a file download dialog box, then tricking the user into double-clicking on the "Run" button, aka "link hijacking".

EPSS: 0.027 (84.5th percentile) — read the EPSS interpretation.

Affected products

Opera Opera_browser
N/a — versions n/a

Weakness classification (CWE)

CWE-1021 — Improper Restriction of Rendered UI Layers or Frames (Clickjacking)

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (x_refsource_CONFIRM, Patch, Broken Link)
cve@mitre.org (vdb-entry, Broken Link, x_refsource_VUPEN)
cve@mitre.org (x_refsource_MISC, Broken Link)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
cve@mitre.org (Patch, x_refsource_SECUNIA, Broken Link, Vendor Advisory, third-party-advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)

Frequently asked questions

What is CVE-2005-2407?: CVE-2005-2407 is a vulnerability in Opera Browser, classified under Improper Restriction of Rendered UI Layers or Frames (Clickjacking). Published 2005-08-01.
Is CVE-2005-2407 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.