CVE-2008-4199 | BDVDB-2026-32576 Detail
Description#
Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.vupen.com/english/advisories/2008/2416
- http://www.opera.com/support/search/view/896/
- http://secunia.com/advisories/32538
- http://www.opera.com/docs/changelogs/mac/952/
- http://www.opera.com/docs/changelogs/solaris/952/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44557
- http://securitytracker.com/id?1020722
- http://www.securityfocus.com/bid/30768
- http://www.opera.com/docs/changelogs/windows/952/
- http://www.opera.com/docs/changelogs/linux/952/
- http://www.openwall.com/lists/oss-security/2008/09/24/4
- http://www.openwall.com/lists/oss-security/2008/09/19/2
- http://secunia.com/advisories/31549
- http://bugs.gentoo.org/show_bug.cgi?id=235298
- http://www.opera.com/docs/changelogs/freebsd/952/
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.