PT-2008-5909 · Opera · Opera

Steven M. Christey · Published 2008-10-23 · Updated 2017-08-08 · CVE-2008-4698

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Opera versions prior to 9.61

Description The issue allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds due to improper blocking of scripts during the preview of a news feed.

Recommendations For Opera versions prior to 9.61, update to version 9.61 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-4698

Affected Products

Opera

References · 17

• http://secunia.com/advisories/32299 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html · Vendor Advisory
• http://secunia.com/advisories/32538 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4698 · Security Note
• http://security.gentoo.org/glsa/glsa-200811-01.xml · Vendor Advisory
• http://secunia.com/advisories/32394 · Vendor Advisory
• http://opera.com/docs/changelogs/solaris/961 · Note
• http://opera.com/docs/changelogs/freebsd/961 · Note
• http://securityfocus.com/bid/31842 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46005 · Note
• http://vupen.com/english/advisories/2008/2873 · Note
• http://openwall.com/lists/oss-security/2008/10/21/6 · Note
• http://opera.com/docs/changelogs/windows/961 · Note
• http://opera.com/docs/changelogs/mac/961 · Note
• http://openwall.com/lists/oss-security/2008/10/22/5 · Note