CVE-2004-0473: Opera Browser

Low severity, CVSS 2.6. EPSS: 2.5% chance of exploitation in the next 30 days.

Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the "-f" option on Windows XP or (2) the "-n" option on Linux.

Affected products

• Opera Opera Browser: before 7.50 (fixed in 7.50)

Published 2004-07-07. Last modified 2026-06-16.