VDB
CVE-2008-4199
CVE-2008-4199
PUBLISHED
CVSS 5 MEDIUM
Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."
EPSS 2.86% · 86.5th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
2.86%
86.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| opera | opera_browser | 9.23, 0, 5.0 |
| n/a | n/a | n/a |
Timeline
- Sep 27, 2008 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
References
- http://www.opera.com/support/search/view/896/ url
- 32538 third-party-advisory
- http://www.opera.com/docs/changelogs/windows/952/ url
- 31549 third-party-advisory
- http://www.opera.com/docs/changelogs/freebsd/952/ url
- GLSA-200811-01 vendor-advisory
- ADV-2008-2416 vdb
- http://www.opera.com/docs/changelogs/mac/952/ url
- http://www.opera.com/docs/changelogs/solaris/952/ url
- opera-feedsource-info-disclosure(44557) vdb
- 1020722 vdb
- 30768 vdb
- http://www.opera.com/docs/changelogs/linux/952/ url
- [oss-security] 20080923 Re: CVE request: Opera < 9.52 multiple vulnerabilities mailing-list
- [oss-security] 20080919 CVE request: Opera < 9.52 multiple vulnerabilities mailing-list
- http://bugs.gentoo.org/show_bug.cgi?id=235298 url
- https://nvd.nist.gov/vuln/detail/CVE-2008-4199 advisory
- http://www.opera.com/docs/changelogs/freebsd/952 url
- http://www.opera.com/docs/changelogs/linux/952 url
- http://www.opera.com/docs/changelogs/mac/952 url
…and 3 more