CVE-2004-2570

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16
Weakness: CWE-74

Description

Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript to read arbitrary files from the client's local filesystem or display a false URL to the user.

Affected products

Opera Browser: before 7.54 — fixed in 7.54

How to fix

Upgrade to a fixed version: Opera Browser 7.54. Check the vendor advisory for mitigations.

References

http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0131.html
http://osvdb.org/8331
http://secunia.com/advisories/12233
http://www.gentoo.org/security/en/glsa/glsa-200408-05.xml
http://www.greymagic.com/security/advisories/gm008-op/
http://www.opera.com/docs/changelogs/windows/754/
http://www.securityfocus.com/bid/10873
https://exchange.xforce.ibmcloud.com/vulnerabilities/16904
http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0131.html
http://osvdb.org/8331
http://secunia.com/advisories/12233
http://www.gentoo.org/security/en/glsa/glsa-200408-05.xml

Get alerted when CVE-2004-2570 or the next vulnerability affects your stack