PT-2008-5497 · Opera · Opera

Published 2008-09-27 · Updated 2017-08-08 · CVE-2008-4199

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Opera versions prior to 9.52

Description The issue allows remote attackers to determine the validity of local filenames via vectors involving detection of JavaScript events and appropriate manipulation, by using links from web pages to feed source files on the local disk.

Recommendations For Opera versions prior to 9.52, update to version 9.52 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-4199

Affected Products

Opera

References · 17

• http://secunia.com/advisories/32538 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200811-01.xml · Vendor Advisory
• http://secunia.com/advisories/31549 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4199 · Security Note
• http://vupen.com/english/advisories/2008/2416 · Vendor Advisory
• http://openwall.com/lists/oss-security/2008/09/24/4 · Note
• http://opera.com/docs/changelogs/linux/952 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44557 · Note
• http://opera.com/docs/changelogs/freebsd/952 · Note
• http://opera.com/docs/changelogs/solaris/952 · Note
• http://opera.com/docs/changelogs/mac/952 · Note
• http://bugs.gentoo.org/show_bug.cgi?id=235298 · Note
• http://opera.com/support/search/view/896 · Note
• http://openwall.com/lists/oss-security/2008/09/19/2 · Note
• http://securitytracker.com/id?1020722 · Note