CVE-2008-4698

Severity

57%

Complexity

86%

Confidentiality

81%

Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds.

Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds.

CVSS 2.0 Base Score 5.8. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:N).

Overview

Type

Opera Browser

First reported 16 years ago

2008-10-23 22:00:00

Last updated 7 years ago

2017-08-08 01:32:00

Affected Software

Opera Browser 5.0

5.0

Opera Browser 5.0 beta 2

5.0

Opera Browser 5.0 beta 3

5.0

Opera Browser 5.0 beta 4

5.0

Opera Browser 5.0 beta 5

5.0

Opera Browser 5.0 beta 6

5.0

Opera Browser 5.0 beta 7

5.0

Opera Browser 5.0 beta 8

5.0

Opera Browser 5.02

5.02

Opera Browser 5.10

5.10

Opera Browser 5.11

5.11

Opera Browser 5.12

5.12

Opera Browser 6.0

6.0

Opera Browser 6.0 beta 1

6.0

Opera Browser 6.0 beta 2

6.0

Opera Browser 6.0 beta 3

6.0

Opera Browser 6.0 TP 1

6.0

Opera Browser 6.0 TP 2

6.0

Opera Browser 6.0 TP 3

6.0

Opera Browser 6.01

6.01

Opera Browser 6.1

6.1

Opera Browser 6.1 beta 1

6.1

Opera Browser 6.02

6.02

Opera Browser 6.03

6.03

Opera Browser 6.04

6.04

Opera Browser 6.05

6.05

Opera Browser 6.06

6.06

Opera Browser 6.11

6.11

Opera Browser 6.12

6.12

Opera Browser 7.0

7.0

Opera Browser 7.0 beta 1

7.0

Opera Browser 7.0 beta 1 v2

7.0

Opera Browser 7.0 beta 2

7.0

Opera Browser 7.01

7.01

Opera Browser 7.02

7.02

Opera Browser 7.03

7.03

Opera Browser 7.10

7.10

Opera Browser 7.10 beta 1

7.10

Opera Browser 7.11

7.11

Opera Browser 7.11 beta 2

7.11

Opera Browser 7.20

7.20

Opera Browser 7.20 beta 7

7.20

Opera Browser 7.21

7.21

Opera Browser 7.22

7.22

Opera Browser 7.23

7.23

Opera Browser 7.50

7.50

Opera Browser 7.50 beta 1

7.50

Opera Browser 7.51

7.51

Opera Browser 7.52

7.52

Opera Browser 7.53

7.53

Opera Browser 7.54

7.54

Opera Browser 7.54 update 1

7.54

Opera Browser 7.54 update 2

7.54

Opera Browser 7.60

7.60

Opera Browser 8.0

8.0

Opera Browser 8.0 beta 1

8.0

Opera Browser 8.0 beta 2

8.0

Opera Browser 8.0 beta 3

8.0

Opera Browser 8.01

8.01

Opera Browser 8.02

8.02

Opera Browser 8.50

8.50

Opera Browser 8.51

8.51

Opera Browser 8.52

8.52

Opera Browser 8.53

8.53

Opera Browser 8.54

8.54

Opera Browser 9.0

9.0

Opera Browser 9.0 beta 1

9.0

Opera Browser 9.0 beta 2

9.0

Opera Browser 9.01

9.01

Opera Browser 9.02

9.02

Opera Browser 9.10

9.10

Opera Browser 9.12

9.12

Opera Browser 9.20

9.20

Opera Browser 9.20 beta 1

9.20

Opera Browser 9.21

9.21

Opera Browser 9.22

9.22

Opera Browser 9.23

9.23

Opera Browser 9.24

9.24

Opera Browser 9.25

9.25

Opera Browser 9.26

9.26

Opera Browser 9.27

9.27

Opera Browser 9.50

9.50

Opera Browser 9.50 beta 1

9.50

Opera Browser 9.50 beta 2

9.50

Opera Browser 9.51

9.51

Opera Browser 9.52

9.52

Opera Browser 9.60 beta 1

9.60

References

SUSE-SR:2008:022

32299

Vendor Advisory

32394

Vendor Advisory

32538

Vendor Advisory

GLSA-200811-01

[oss-security] 20081021 Re: CVE Request: Opera 9.60 with security fixes

[oss-security] 20081022 Re: CVE Request: Opera 9.60 with security fixes

http://www.opera.com/docs/changelogs/freebsd/961/

http://www.opera.com/docs/changelogs/linux/961/

http://www.opera.com/docs/changelogs/mac/961/

http://www.opera.com/docs/changelogs/solaris/961/

http://www.opera.com/docs/changelogs/windows/961/

http://www.opera.com/support/search/view/905/

31842

ADV-2008-2873

opera-newsfeed1-weak-security(46005)

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.