CVE-2005-2407

A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above a file download dialog box, then tricking the user into double-clicking on the "Run" button, aka "link hijacking".

• CWE-1021

• http://secunia.com/advisories/15781Broken Link, Patch, Vendor Advisory
• http://secunia.com/secunia_research/2005-19/advisory/Broken Link
• http://securitytracker.com/id?1015353Broken Link, Third Party Advisory, VDB Entry
• http://www.opera.com/linux/changelogs/802/Broken Link, Patch
• http://www.securityfocus.com/bid/15835Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2005/1251Broken Link
• http://secunia.com/advisories/15781Broken Link, Patch, Vendor Advisory
• http://secunia.com/secunia_research/2005-19/advisory/Broken Link
• http://securitytracker.com/id?1015353Broken Link, Third Party Advisory, VDB Entry
• http://www.opera.com/linux/changelogs/802/Broken Link, Patch
• http://www.securityfocus.com/bid/15835Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2005/1251Broken Link

Published

Aug 1, 2005

Last Modified

Jun 16, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2401PHP-Fusion allows remote attackers to inject arbitrary Casca…
• CVE-2005-2402Cross-site scripting (XSS) vulnerability in search.php in PH…
• CVE-2005-2403The login protocol in RealChat 3.5.1b does not use authentic…
• CVE-2005-2404SQL injection vulnerability in sendcard.php in Sendcard 3.2.…
• CVE-2005-2405Opera 8.01, when the "Arial Unicode MS" font (ARIALUNI.TTF) …
• CVE-2005-2406Opera 8.01 allows remote attackers to conduct cross-site scr…
• CVE-2005-2408Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2005-2409Format string vulnerability in util.c in nbsmtp 0.99 and ear…
• CVE-2005-2410Format string vulnerability in the nm_info_handler function …
• CVE-2005-2411Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.…
• CVE-2005-2412PHP remote file inclusion vulnerability in block.php in PHP …
• CVE-2005-2413PHP remote file inclusion vulnerability in apa_phpinclude.in…