CVE-2004-0537

Name: CVE-2004-0537
Creator: NVD / NIST
Published: 2004-08-06T04:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.26%

Last modified Jun 16, 2026

CVE-2004-0537 is a vulnerability of currently unknown severity. Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces.. EPSS estimates a 2.26% chance of exploitation in the next 30 days.

Description

Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces.

Metrics

EPSS Probability

2.26%

80.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Opera	Opera Browser	<= 7.50

References

http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022263.htmlThird Party Advisory
http://marc.info/?l=bugtraq&m=108627581717738&w=2Mailing List
http://osvdb.org/6590Broken Link
http://secunia.com/advisories/11762Broken Link
http://security.greymagic.com/security/advisories/gm007-op/Broken Link
http://www.opera.com/linux/changelogs/751/index.dmlBroken Link
http://www.securityfocus.com/bid/10452Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16307Third Party Advisory, VDB Entry
http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022263.htmlThird Party Advisory
http://marc.info/?l=bugtraq&m=108627581717738&w=2Mailing List
http://osvdb.org/6590Broken Link
http://secunia.com/advisories/11762Broken Link
http://security.greymagic.com/security/advisories/gm007-op/Broken Link
http://www.opera.com/linux/changelogs/751/index.dmlBroken Link
http://www.securityfocus.com/bid/10452Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16307Third Party Advisory, VDB Entry

Timeline

Published: Aug 6, 2004
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2004-0537?

How severe is CVE-2004-0537?

Severity scoring for CVE-2004-0537 is pending analysis. The EPSS model estimates a 2.26% probability of exploitation in the next 30 days.

How do I fix CVE-2004-0537?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2004-0537?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST