CVE-2008-4197

moderate-risk
Published 2008-09-27

Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.

Do I need to act?

~
5.1% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (1)

Opera Browser

Affected Vendors

Opera

References (30)

Issue Tracking http://bugs.gentoo.org/show_bug.cgi?id=235298
Broken Link http://secunia.com/advisories/31549
Broken Link http://secunia.com/advisories/32538
Third Party Advisory http://security.gentoo.org/glsa/glsa-200811-01.xml
Mailing List http://www.openwall.com/lists/oss-security/2008/09/19/2
Mailing List http://www.openwall.com/lists/oss-security/2008/09/24/4
Broken Link http://www.opera.com/docs/changelogs/freebsd/952/
Broken Link http://www.opera.com/docs/changelogs/linux/952/
Broken Link http://www.opera.com/docs/changelogs/solaris/952/
Broken Link http://www.opera.com/docs/changelogs/windows/952/
Broken Link http://www.opera.com/support/search/view/894/
Broken Link http://www.securityfocus.com/bid/30768
Broken Link http://www.securitytracker.com/id?1020720
Broken Link http://www.vupen.com/english/advisories/2008/2416
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/44552
Issue Tracking http://bugs.gentoo.org/show_bug.cgi?id=235298
Broken Link http://secunia.com/advisories/31549
Broken Link http://secunia.com/advisories/32538
Third Party Advisory http://security.gentoo.org/glsa/glsa-200811-01.xml
Mailing List http://www.openwall.com/lists/oss-security/2008/09/19/2
and 10 more references
43
/ 100
moderate-risk
Severity 30/34 · Critical
Exploitability 8/34 · Low
Exposure 5/34 · Minimal