9.3

CVE-2008-4197

Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Opera ≫ Opera Browser Version < 9.52
   Freebsd ≫ Freebsd Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Oracle ≫ Solaris Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.34% 0.927
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

http://secunia.com/advisories/31549
Vendor Advisory
Broken Link
http://secunia.com/advisories/32538
Vendor Advisory
Broken Link
http://security.gentoo.org/glsa/glsa-200811-01.xml
Third Party Advisory
http://www.openwall.com/lists/oss-security/2008/09/19/2
Mailing List
http://www.openwall.com/lists/oss-security/2008/09/24/4
Mailing List
http://www.opera.com/docs/changelogs/freebsd/952/
Broken Link
http://www.opera.com/docs/changelogs/linux/952/
Broken Link
http://www.opera.com/docs/changelogs/solaris/952/
Broken Link
http://www.opera.com/docs/changelogs/windows/952/
Broken Link
http://www.securityfocus.com/bid/30768
Third Party Advisory
Broken Link
VDB Entry
http://www.vupen.com/english/advisories/2008/2416
Broken Link
http://bugs.gentoo.org/show_bug.cgi?id=235298
Issue Tracking
http://www.opera.com/support/search/view/894/
Broken Link
http://www.securitytracker.com/id?1020720
Third Party Advisory
Broken Link
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44552
Third Party Advisory
VDB Entry