Evil-DB LogoEvil-DB
← All CVEs

CVE-2004-1491

medium · 5

Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec entry.

5
CVSS
12.6%
EPSS (exploit prob.)
96th
EPSS percentile
2004-12-31
Published

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

VendorProductAffected versions
operaopera_browser<= 7.54
gentoolinuxall versions
kdekde3.2.3
susesuse_linux1.0
susesuse_linux2.0
susesuse_linux3.0
susesuse_linux4.0
susesuse_linux4.2
susesuse_linux4.3
susesuse_linux4.4
susesuse_linux4.4.1
susesuse_linux5.0
susesuse_linux5.1
susesuse_linux5.2
susesuse_linux5.3
susesuse_linux6.0
susesuse_linux6.1
susesuse_linux6.1
susesuse_linux6.2
susesuse_linux6.3
susesuse_linux6.3
susesuse_linux6.4
susesuse_linux6.4
susesuse_linux7.0
susesuse_linux7.0
susesuse_linux7.1
susesuse_linux7.1
susesuse_linux7.2
susesuse_linux7.3
susesuse_linux8.0
susesuse_linux8.1
susesuse_linux8.2
susesuse_linux9.0
susesuse_linux9.1
susesuse_linux9.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-1491