CVE-2004-1490: Opera Browser

Low severity, CVSS 2.6. EPSS: 2.5% chance of exploitation in the next 30 days.

Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces (ASCII character code 160) in the (1) Content-Disposition or (2) Content-Type headers.

Affected products

• Opera Opera Browser: up to and including 7.54

Published 2004-12-31. Last modified 2026-06-16.