CVE-2004-2659

Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking Open via a request for a different mouse or keyboard action very shortly before the Open dialog appears. NOTE: this is a different issue than CVE-2005-2407.

• CWE-362

• http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.htmlBroken Link, Exploit
• http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/Exploit, Vendor Advisory
• http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.htmlBroken Link, Exploit
• http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/Exploit, Vendor Advisory

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2653Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.…
• CVE-2004-2654The clientAbortBody function in client_side.c in Squid Web P…
• CVE-2004-2655rdesktop 1.3.1 with xscreensaver 4.14, and possibly other ve…
• CVE-2004-2656Multiple cross-site scripting (XSS) vulnerabilities in Slash…
• CVE-2004-2657Mozilla Firefox 1.5.0.1, and possibly other versions, preser…
• CVE-2004-2658resmgr in SUSE CORE 9 does not properly identify terminal na…
• CVE-2004-2660Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.…
• CVE-2004-2661Soft3304 04WebServer before 1.41 does not properly check fil…
• CVE-2004-2662Soft3304 04WebServer before 1.41 allows remote attackers to …
• CVE-2004-2663The (1) SetDebugging and (2) RunEgatherer methods in IBM Acc…
• CVE-2004-2664John Lim ADOdb Library for PHP before 4.23 allows remote att…
• CVE-2004-2665Unspecified vulnerability in the Address and Routing Paramet…