CVE-2008-4292 Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vectors. NOTE: it is not clear whether this is a vulnerability,....
HighCVSS 10.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vectors. NOTE: it is not clear whether this is a vulnerability, but the vendor included it in a security section of the advisory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opera browser | <= 9.51 | No fix listed |
| opera browser | = 5.0 | No fix listed |
| opera browser | = 5.0-beta2 | No fix listed |
| opera browser | = 5.0-beta3 | No fix listed |
| opera browser | = 5.0-beta4 | No fix listed |
| opera browser | = 5.0-beta5 | No fix listed |
| opera browser | = 5.0-beta6 | No fix listed |
| opera browser | = 5.0-beta7 | No fix listed |
| opera browser | = 5.0-beta8 | No fix listed |
| opera browser | = 5.02 | No fix listed |
| opera browser | = 5.10 | No fix listed |
| opera browser | = 5.11 | No fix listed |
| opera browser | = 5.12 | No fix listed |
| opera browser | = 6.0 | No fix listed |
| opera browser | = 6.0-beta1 | No fix listed |
| opera browser | = 6.0-beta2 | No fix listed |
| opera browser | = 6.0-beta3 | No fix listed |
| opera browser | = 6.0-tp1 | No fix listed |
| opera browser | = 6.0-tp2 | No fix listed |
| opera browser | = 6.0-tp3 | No fix listed |
| opera browser | = 6.1 | No fix listed |
| opera browser | = 6.01 | No fix listed |
| opera browser | = 6.1-beta1 | No fix listed |
| opera browser | = 6.02 | No fix listed |
| opera browser | = 6.03 | No fix listed |
Show 60 more
| Product | Affected versions | Fixed in |
|---|---|---|
| opera browser | = 6.04 | No fix listed |
| opera browser | = 6.05 | No fix listed |
| opera browser | = 6.06 | No fix listed |
| opera browser | = 6.11 | No fix listed |
| opera browser | = 6.12 | No fix listed |
| opera browser | = 7.0 | No fix listed |
| opera browser | = 7.0-beta1 | No fix listed |
| opera browser | = 7.0-beta1_v2 | No fix listed |
| opera browser | = 7.0-beta2 | No fix listed |
| opera browser | = 7.01 | No fix listed |
| opera browser | = 7.02 | No fix listed |
| opera browser | = 7.03 | No fix listed |
| opera browser | = 7.10 | No fix listed |
| opera browser | = 7.10-beta1 | No fix listed |
| opera browser | = 7.11 | No fix listed |
| opera browser | = 7.11-beta2 | No fix listed |
| opera browser | = 7.20 | No fix listed |
| opera browser | = 7.20-beta7 | No fix listed |
| opera browser | = 7.21 | No fix listed |
| opera browser | = 7.22 | No fix listed |
| opera browser | = 7.23 | No fix listed |
| opera browser | = 7.50 | No fix listed |
| opera browser | = 7.50-beta1 | No fix listed |
| opera browser | = 7.51 | No fix listed |
| opera browser | = 7.52 | No fix listed |
| opera browser | = 7.53 | No fix listed |
| opera browser | = 7.54 | No fix listed |
| opera browser | = 7.54-update1 | No fix listed |
| opera browser | = 7.54-update2 | No fix listed |
| opera browser | = 7.60 | No fix listed |
| opera browser | = 8.0 | No fix listed |
| opera browser | = 8.0-beta1 | No fix listed |
| opera browser | = 8.0-beta2 | No fix listed |
| opera browser | = 8.0-beta3 | No fix listed |
| opera browser | = 8.01 | No fix listed |
| opera browser | = 8.02 | No fix listed |
| opera browser | = 8.50 | No fix listed |
| opera browser | = 8.51 | No fix listed |
| opera browser | = 8.52 | No fix listed |
| opera browser | = 8.53 | No fix listed |
| opera browser | = 8.54 | No fix listed |
| opera browser | = 9.0 | No fix listed |
| opera browser | = 9.0-beta1 | No fix listed |
| opera browser | = 9.0-beta2 | No fix listed |
| opera browser | = 9.01 | No fix listed |
| opera browser | = 9.02 | No fix listed |
| opera browser | = 9.10 | No fix listed |
| opera browser | = 9.12 | No fix listed |
| opera browser | = 9.20 | No fix listed |
| opera browser | = 9.20-beta1 | No fix listed |
| opera browser | = 9.21 | No fix listed |
| opera browser | = 9.22 | No fix listed |
| opera browser | = 9.23 | No fix listed |
| opera browser | = 9.24 | No fix listed |
| opera browser | = 9.25 | No fix listed |
| opera browser | = 9.26 | No fix listed |
| opera browser | = 9.27 | No fix listed |
| opera browser | = 9.50 | No fix listed |
| opera browser | = 9.50-beta1 | No fix listed |
| opera browser | = 9.50-beta2 | No fix listed |
References
- bugs.gentoo.org
- my.opera.com
- my.opera.com
- 31549 third-party-advisory vendor-advisory
- 32538 third-party-advisory vendor-advisory
- GLSA-200811-01 vendor-advisory
- [oss-security] 20080919 CVE request: Opera < 9.52 multiple vulnerabilities mailing-list
- [oss-security] 20080923 Re: CVE request: Opera < 9.52 multiple vulnerabilities mailing-list
- www.opera.com
- www.opera.com
- www.opera.com
- www.opera.com
- www.opera.com
- ADV-2008-2416 vdb-entry vendor-advisory
- opera-crloverride-unspecified(45589) vdb-entry