CVE-2008-4695 Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache pathname of a cached Java applet and then launching this applet from...
HighCVSS 9.3
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache pathname of a cached Java applet and then launching this applet from the cache, leading to applet execution within the local-machine context.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opera | <= 9.60 | No fix listed |
| opera | = 5.0 | No fix listed |
| opera | = 5.0-beta_2 | No fix listed |
| opera | = 5.0-beta_3 | No fix listed |
| opera | = 5.0-beta_4 | No fix listed |
| opera | = 5.0-beta_5 | No fix listed |
| opera | = 5.0-beta_6 | No fix listed |
| opera | = 5.0-beta_7 | No fix listed |
| opera | = 5.0-beta_8 | No fix listed |
| opera | = 5.02 | No fix listed |
| opera | = 5.10 | No fix listed |
| opera | = 5.11 | No fix listed |
| opera | = 5.12 | No fix listed |
| opera | = 6.0 | No fix listed |
| opera | = 6.0-beta_1 | No fix listed |
| opera | = 6.0-beta_2 | No fix listed |
| opera | = 6.0-beta_3 | No fix listed |
| opera | = 6.1 | No fix listed |
| opera | = 6.01 | No fix listed |
| opera | = 6.02 | No fix listed |
| opera | = 6.03 | No fix listed |
| opera | = 6.04 | No fix listed |
| opera | = 6.05 | No fix listed |
| opera | = 6.06 | No fix listed |
| opera | = 6.11 | No fix listed |
Show 54 more
| Product | Affected versions | Fixed in |
|---|---|---|
| opera | = 6.12 | No fix listed |
| opera | = 7.0 | No fix listed |
| opera | = 7.0-beta_1 | No fix listed |
| opera | = 7.0-beta_1v2 | No fix listed |
| opera | = 7.0-beta_2 | No fix listed |
| opera | = 7.01 | No fix listed |
| opera | = 7.02 | No fix listed |
| opera | = 7.03 | No fix listed |
| opera | = 7.10 | No fix listed |
| opera | = 7.11 | No fix listed |
| opera | = 7.20 | No fix listed |
| opera | = 7.20-beta7 | No fix listed |
| opera | = 7.21 | No fix listed |
| opera | = 7.22 | No fix listed |
| opera | = 7.23 | No fix listed |
| opera | = 7.50 | No fix listed |
| opera | = 7.50-beta_1 | No fix listed |
| opera | = 7.51 | No fix listed |
| opera | = 7.52 | No fix listed |
| opera | = 7.53 | No fix listed |
| opera | = 7.54 | No fix listed |
| opera | = 7.54-update_1 | No fix listed |
| opera | = 7.54-update_2 | No fix listed |
| opera | = 8.0 | No fix listed |
| opera | = 8.0-beta_1 | No fix listed |
| opera | = 8.0-beta_2 | No fix listed |
| opera | = 8.0-beta_3 | No fix listed |
| opera | = 8.01 | No fix listed |
| opera | = 8.02 | No fix listed |
| opera | = 8.50 | No fix listed |
| opera | = 8.51 | No fix listed |
| opera | = 8.52 | No fix listed |
| opera | = 8.53 | No fix listed |
| opera | = 8.54 | No fix listed |
| opera | = 9.0 | No fix listed |
| opera | = 9.0-beta_1 | No fix listed |
| opera | = 9.0-beta_2 | No fix listed |
| opera | = 9.01 | No fix listed |
| opera | = 9.02 | No fix listed |
| opera | = 9.10 | No fix listed |
| opera | = 9.20 | No fix listed |
| opera | = 9.20-beta_1 | No fix listed |
| opera | = 9.21 | No fix listed |
| opera | = 9.22 | No fix listed |
| opera | = 9.23 | No fix listed |
| opera | = 9.24 | No fix listed |
| opera | = 9.25 | No fix listed |
| opera | = 9.26 | No fix listed |
| opera | = 9.27 | No fix listed |
| opera | = 9.50 | No fix listed |
| opera | = 9.50-beta_1 | No fix listed |
| opera | = 9.50-beta_2 | No fix listed |
| opera | = 9.51 | No fix listed |
| opera | = 9.52 | No fix listed |
References
- SUSE-SR:2008:022 vendor-advisory
- 32177 third-party-advisory
- 32394 third-party-advisory
- 32538 third-party-advisory
- GLSA-200811-01 vendor-advisory
- 1021017 vdb-entry
- [oss-security] 20081021 CVE Request: Opera 9.60 with security fixes mailing-list
- [oss-security] 20081022 Re: CVE Request: Opera 9.60 with security fixes mailing-list
- www.opera.com
- www.opera.com
- www.opera.com
- www.opera.com
- www.opera.com
- www.opera.com vendor-advisory
- 31643 vdb-entry
- ADV-2008-2765 vdb-entry
- opera-java-applets-information-disclosure(45723) vdb-entry