CVE-2008-4199

N/A Unknown
Published: September 27, 2008 Modified: April 23, 2026
View on NVD

Description

Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://bugs.gentoo.org/show_bug.cgi?id=235298
Source: cve@mitre.org
http://secunia.com/advisories/31549
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/32538
Source: cve@mitre.org
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200811-01.xml
Source: cve@mitre.org
http://securitytracker.com/id?1020722
Source: cve@mitre.org
http://www.openwall.com/lists/oss-security/2008/09/19/2
Source: cve@mitre.org
http://www.openwall.com/lists/oss-security/2008/09/24/4
Source: cve@mitre.org
http://www.opera.com/docs/changelogs/freebsd/952/
Source: cve@mitre.org
http://www.opera.com/docs/changelogs/linux/952/
Source: cve@mitre.org
http://www.opera.com/docs/changelogs/mac/952/
Source: cve@mitre.org
http://www.opera.com/docs/changelogs/solaris/952/
Source: cve@mitre.org
http://www.opera.com/docs/changelogs/windows/952/
Source: cve@mitre.org
http://www.opera.com/support/search/view/896/
Source: cve@mitre.org
http://www.securityfocus.com/bid/30768
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2008/2416
Source: cve@mitre.org
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44557
Source: cve@mitre.org
http://bugs.gentoo.org/show_bug.cgi?id=235298
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/31549
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/32538
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200811-01.xml
Source: af854a3a-2127-422b-91ae-364da2661108
http://securitytracker.com/id?1020722
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.openwall.com/lists/oss-security/2008/09/19/2
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.openwall.com/lists/oss-security/2008/09/24/4
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.opera.com/docs/changelogs/freebsd/952/
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.opera.com/docs/changelogs/linux/952/
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.opera.com/docs/changelogs/mac/952/
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.opera.com/docs/changelogs/solaris/952/
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.opera.com/docs/changelogs/windows/952/
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.opera.com/support/search/view/896/
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/30768
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2008/2416
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44557
Source: af854a3a-2127-422b-91ae-364da2661108

32 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.8%
75th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-200

Affected Vendors

opera

Related CVEs

CVE-2026-41279 N/A
CVE-2026-41278 N/A
CVE-2026-41277 N/A
CVE-2026-41276 N/A
CVE-2026-41275 N/A