CVE-2005-2407: Opera Browser

Medium severity, CVSS 5.1. EPSS: 2.7% chance of exploitation in the next 30 days.

A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malicious new window above a file download dialog box, then tricking the user into double-clicking on the "Run" button, aka "link hijacking".

Affected products

• Opera Opera Browser: up to and including 8.01

Published 2005-08-01. Last modified 2026-06-16.