VDB
CVE-2008-4292
CVE-2008-4292
PUBLISHED
CVSS 10 CRITICAL
Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vectors. NOTE: it is not clear whether this is a vulnerability, but the vendor included it in a security section of the advisory.
EPSS 1.92% · 79.5th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
1.92%
79.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| opera | opera_browser | 0, 5.0, 5.0 |
Timeline
- Sep 27, 2008 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- Jul 22, 2023 EPSS Score
- Sep 14, 2023 EPSS Score
References
- http://secunia.com/advisories/31549 url
- ADV-2008-2416 vdb
- 32538 third-party-advisory
- http://my.opera.com/yngve/blog/2008/06/27/nobody-checks-the-padlock-debunked-by-opera-users url
- http://www.opera.com/docs/changelogs/solaris/952/ url
- [oss-security] 20080923 Re: CVE request: Opera < 9.52 multiple vulnerabilities mailing-list
- http://www.opera.com/docs/changelogs/freebsd/952/ url
- opera-crloverride-unspecified(45589) vdb
- http://www.opera.com/docs/changelogs/mac/952/ url
- http://my.opera.com/community/forums/topic.dml?id=241988&t=1222404671&page=1 url
- http://www.opera.com/docs/changelogs/windows/952/ url
- http://www.opera.com/docs/changelogs/linux/952/ url
- [oss-security] 20080919 CVE request: Opera < 9.52 multiple vulnerabilities mailing-list
- http://bugs.gentoo.org/show_bug.cgi?id=235298 url
- GLSA-200811-01 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2008-4292 advisory
- http://www.opera.com/docs/changelogs/freebsd/952 url
- http://www.opera.com/docs/changelogs/linux/952 url
- http://www.opera.com/docs/changelogs/mac/952 url
- http://www.opera.com/docs/changelogs/solaris/952 url
…and 1 more