Read the docs
TI-2008-04478 Aliases CVE-2008-4695GHSA-5c3p-jr5h-mqr3

Opera before 9.60 allows remote attackers to obtain sensitive information and have…

Priority MEDIUM 49CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Information disclosure
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache pathname of a cached Java applet and then launching this applet from the cache, leading to applet execution within the local-machine context.

Why it matters now

EPSS 0.05978 93rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 79

CPEVersionsRoleVendor
cpe:2.3:a:opera:opera:*:beta_1:*:*:*:*:*:*up to 9.60VulnerableOpera
cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*5.0VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_2:*:*:*:*:*:*5.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_3:*:*:*:*:*:*5.0 beta_3VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_4:*:*:*:*:*:*5.0 beta_4VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_5:*:*:*:*:*:*5.0 beta_5VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_6:*:*:*:*:*:*5.0 beta_6VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_7:*:*:*:*:*:*5.0 beta_7VulnerableOpera
cpe:2.3:a:opera:opera:5.0:beta_8:*:*:*:*:*:*5.0 beta_8VulnerableOpera
cpe:2.3:a:opera:opera:5.02:*:*:*:*:*:*:*5.02VulnerableOpera
  • cpe:2.3:a:opera:opera:*:beta_1:*:*:*:*:*:* Versions up to 9.60 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_2:*:*:*:*:*:* Versions 5.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_3:*:*:*:*:*:* Versions 5.0 beta_3 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_4:*:*:*:*:*:* Versions 5.0 beta_4 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_5:*:*:*:*:*:* Versions 5.0 beta_5 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_6:*:*:*:*:*:* Versions 5.0 beta_6 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_7:*:*:*:*:*:* Versions 5.0 beta_7 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:beta_8:*:*:*:*:*:* Versions 5.0 beta_8 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.02:*:*:*:*:*:*:* Versions 5.02 Vulnerable ·Opera
Show 69 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:opera:opera:5.10:*:*:*:*:*:*:*5.10VulnerableOpera
cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*5.11VulnerableOpera
cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*5.12VulnerableOpera
cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*6.0VulnerableOpera
cpe:2.3:a:opera:opera:6.0:beta_1:*:*:*:*:*:*6.0 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:6.0:beta_2:*:*:*:*:*:*6.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:6.0:beta_3:*:*:*:*:*:*6.0 beta_3VulnerableOpera
cpe:2.3:a:opera:opera:6.1:*:*:*:*:*:*:*6.1VulnerableOpera
cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*6.01VulnerableOpera
cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*6.02VulnerableOpera
cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*6.03VulnerableOpera
cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*6.04VulnerableOpera
cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*6.05VulnerableOpera
cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*6.06VulnerableOpera
cpe:2.3:a:opera:opera:6.11:*:*:*:*:*:*:*6.11VulnerableOpera
cpe:2.3:a:opera:opera:6.12:*:*:*:*:*:*:*6.12VulnerableOpera
cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*7.0VulnerableOpera
cpe:2.3:a:opera:opera:7.0:beta_1:*:*:*:*:*:*7.0 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:7.0:beta_1v2:*:*:*:*:*:*7.0 beta_1v2VulnerableOpera
cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*7.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*7.01VulnerableOpera
cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*7.02VulnerableOpera
cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*7.03VulnerableOpera
cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*7.10VulnerableOpera
cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*7.11VulnerableOpera
cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*7.20VulnerableOpera
cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*7.20 beta7VulnerableOpera
cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*7.21VulnerableOpera
cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*7.22VulnerableOpera
cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*7.23VulnerableOpera
cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*7.50VulnerableOpera
cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*7.50 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*7.51VulnerableOpera
cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*7.52VulnerableOpera
cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:*7.53VulnerableOpera
cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*7.54VulnerableOpera
cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*7.54 update_1VulnerableOpera
cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:*7.54 update_2VulnerableOpera
cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*8.0VulnerableOpera
cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*8.0 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*8.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:*8.0 beta_3VulnerableOpera
cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*8.01VulnerableOpera
cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*8.02VulnerableOpera
cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:*8.50VulnerableOpera
cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*8.51VulnerableOpera
cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*8.52VulnerableOpera
cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*8.53VulnerableOpera
cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*8.54VulnerableOpera
cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:*9.0VulnerableOpera
cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*9.0 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:*9.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*9.01VulnerableOpera
cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*9.02VulnerableOpera
cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*9.10VulnerableOpera
cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*9.20VulnerableOpera
cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:*9.20 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*9.21VulnerableOpera
cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*9.22VulnerableOpera
cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*9.23VulnerableOpera
cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*9.24VulnerableOpera
cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*9.25VulnerableOpera
cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:*9.26VulnerableOpera
cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:*9.27VulnerableOpera
cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:*9.50VulnerableOpera
cpe:2.3:a:opera:opera:9.50:beta_1:*:*:*:*:*:*9.50 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:*9.50 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:*9.51VulnerableOpera
cpe:2.3:a:opera:opera:9.52:*:*:*:*:*:*:*9.52VulnerableOpera
  • cpe:2.3:a:opera:opera:5.10:*:*:*:*:*:*:* Versions 5.10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:* Versions 5.11 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:* Versions 5.12 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.0:beta_1:*:*:*:*:*:* Versions 6.0 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.0:beta_2:*:*:*:*:*:* Versions 6.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.0:beta_3:*:*:*:*:*:* Versions 6.0 beta_3 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:* Versions 6.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:* Versions 6.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:* Versions 6.03 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:* Versions 6.04 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:* Versions 6.05 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:* Versions 6.06 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.11:*:*:*:*:*:*:* Versions 6.11 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.12:*:*:*:*:*:*:* Versions 6.12 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.0:beta_1:*:*:*:*:*:* Versions 7.0 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.0:beta_1v2:*:*:*:*:*:* Versions 7.0 beta_1v2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:* Versions 7.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:* Versions 7.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:* Versions 7.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:* Versions 7.03 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:* Versions 7.10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:* Versions 7.11 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:* Versions 7.20 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:* Versions 7.20 beta7 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:* Versions 7.21 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:* Versions 7.22 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:* Versions 7.23 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:* Versions 7.50 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:* Versions 7.50 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:* Versions 7.51 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:* Versions 7.52 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:* Versions 7.53 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:* Versions 7.54 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:* Versions 7.54 update_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:* Versions 7.54 update_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:* Versions 8.0 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:* Versions 8.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:* Versions 8.0 beta_3 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:* Versions 8.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:* Versions 8.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:* Versions 8.50 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:* Versions 8.51 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:* Versions 8.52 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:* Versions 8.53 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:* Versions 8.54 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:* Versions 9.0 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:* Versions 9.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:* Versions 9.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:* Versions 9.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:* Versions 9.10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:* Versions 9.20 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:* Versions 9.20 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:* Versions 9.21 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:* Versions 9.22 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:* Versions 9.23 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:* Versions 9.24 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:* Versions 9.25 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:* Versions 9.26 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:* Versions 9.27 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:* Versions 9.50 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.50:beta_1:*:*:*:*:*:* Versions 9.50 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:* Versions 9.50 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:* Versions 9.51 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.52:*:*:*:*:*:*:* Versions 9.52 Vulnerable ·Opera

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-4695
  2. 2026-10-03 Alias added: GHSA-5c3p-jr5h-mqr3

References

Advisory 3

Other 8

  • TI-2008-04929 Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute… CVSS 2.0HIGH 9.3
  • TI-2008-04479 Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote… CVSS 2.0MEDIUM 4.3
  • TI-2008-04094 Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol… CVSS 2.0HIGH 10.0
  • TI-2008-01689 Opera before 9.27 allows remote attackers to cause a denial of service (crash) and… CVSS 2.0HIGH 9.3
  • TI-2008-02947 Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute… CVSS 2.0HIGH 10.0
  • TI-2008-04577 Opera before 9.62 allows remote attackers to execute arbitrary commands via the History… CVSS 2.0HIGH 9.3
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences