CVE-2008-4199

 

Published at: - 27-09-2008 12:30

Last modified: - 06-10-2022 02:13

Total changes: - 2

Description

Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:N/A:N

 

Verification logic

 

Reference

• http://bugs.gentoo.org/show_bug.cgi?id=235298
• [oss-security] 20080919 CVE request: Opera < 9.52 multiple vulnerabilities-
• http://www.opera.com/docs/changelogs/freebsd/952/
• http://www.opera.com/docs/changelogs/solaris/952/
• [oss-security] 20080923 Re: CVE request: Opera < 9.52 multiple vulnerabilities-
• http://www.opera.com/support/search/view/896/
• http://www.opera.com/docs/changelogs/mac/952/
• http://www.opera.com/docs/changelogs/windows/952/
• http://www.opera.com/docs/changelogs/linux/952/
• GLSA-200811-01-
• 32538-Vendor Advisory
• 31549-Vendor Advisory
• 1020722-
• 30768-
• ADV-2008-2416-Vendor Advisory
• opera-feedsource-info-disclosure(44557)-

 

Keywords

NVD

 

CVE-2008-4199

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures