CVE-2004-1490

Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces (ASCII character code 160) in the (1) Content-Disposition or (2) Content-Type headers.

• http://secunia.com/advisories/12981Broken Link, Patch
• http://secunia.com/secunia_research/2004-19/advisory/Broken Link, Patch
• http://www.gentoo.org/security/en/glsa/glsa-200502-17.xmlPatch, Third Party Advisory
• http://www.opera.com/linux/changelogs/754u1/Broken Link
• http://www.securityfocus.com/bid/11883Broken Link, Patch, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18423Third Party Advisory, VDB Entry
• http://secunia.com/advisories/12981Broken Link, Patch
• http://secunia.com/secunia_research/2004-19/advisory/Broken Link, Patch
• http://www.gentoo.org/security/en/glsa/glsa-200502-17.xmlPatch, Third Party Advisory
• http://www.opera.com/linux/changelogs/754u1/Broken Link
• http://www.securityfocus.com/bid/11883Broken Link, Patch, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18423Third Party Advisory, VDB Entry

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1484Format string vulnerability in the _msg function in error.c …
• CVE-2004-1485Buffer overflow in the TFTP client in InetUtils 1.4.2 allows…
• CVE-2004-1486Unknown vulnerability in Serviceguard A.11.13 through A.11.1…
• CVE-2004-1487wget 1.8.x and 1.9.x allows a remote malicious web server to…
• CVE-2004-1488wget 1.8.x and 1.9.x does not filter or quote control charac…
• CVE-2004-1489Opera 7.54 and earlier does not properly limit an applet's a…
• CVE-2004-1491Opera 7.54 and earlier uses kfmclient exec to handle unknown…
• CVE-2004-1492Master of Orion III 1.2.5 and earlier allows remote attacker…
• CVE-2004-1493Master of Orion III 1.2.5 and earlier allows remote attacker…
• CVE-2004-1494Buffer overflow in the Screen Fetch option in XDICT 2002 thr…
• CVE-2004-1495The Repair Archive command in WinRAR 3.40 allows remote atta…
• CVE-2004-1496Directory traversal vulnerability in Web Forums Server 1.6 a…