Read the docs
TI-2008-04479 Aliases CVE-2008-4696GHSA-g928-9c86-8mr8

Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote…

Priority MEDIUM 50CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka md.dat).

Why it matters now

EPSS 0.45729 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 73

CPEVersionsRoleVendor
cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*all versions; up to 9.6VulnerableOpera
cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:*5..10VulnerableOpera
cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*5.0VulnerableOpera
cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:*5.1VulnerableOpera
cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:*5.2VulnerableOpera
cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:*5.3VulnerableOpera
cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:*5.4VulnerableOpera
cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:*5.5VulnerableOpera
cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:*5.6VulnerableOpera
cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:*5.7VulnerableOpera
  • cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:* Versions all versions; up to 9.6 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:* Versions 5..10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:* Versions 5.2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:* Versions 5.3 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:* Versions 5.4 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:* Versions 5.5 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:* Versions 5.6 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:* Versions 5.7 Vulnerable ·Opera
Show 63 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:*5.8VulnerableOpera
cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:*5.9VulnerableOpera
cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*5.11VulnerableOpera
cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*5.12VulnerableOpera
cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:*6 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*6.0VulnerableOpera
cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*6.01VulnerableOpera
cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*6.02VulnerableOpera
cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*6.03VulnerableOpera
cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*6.04VulnerableOpera
cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*6.05VulnerableOpera
cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*6.06VulnerableOpera
cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:*7 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:7:beta_1.2:*:*:*:*:*:*7 beta_1.2VulnerableOpera
cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*7.0VulnerableOpera
cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*7.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*7.01VulnerableOpera
cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*7.02VulnerableOpera
cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*7.03VulnerableOpera
cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*7.10VulnerableOpera
cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*7.11VulnerableOpera
cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*7.20VulnerableOpera
cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*7.20 beta7VulnerableOpera
cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*7.21VulnerableOpera
cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*7.22VulnerableOpera
cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*7.23VulnerableOpera
cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*7.50VulnerableOpera
cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*7.50 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*7.51VulnerableOpera
cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*7.52VulnerableOpera
cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:*7.53VulnerableOpera
cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*7.54VulnerableOpera
cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*7.54 update_1VulnerableOpera
cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:*7.54 update_2VulnerableOpera
cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*8.0VulnerableOpera
cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*8.0 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*8.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:*8.0 beta_3VulnerableOpera
cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*8.01VulnerableOpera
cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*8.02VulnerableOpera
cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:*8.50VulnerableOpera
cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*8.51VulnerableOpera
cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*8.52VulnerableOpera
cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*8.53VulnerableOpera
cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*8.54VulnerableOpera
cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:*9.0VulnerableOpera
cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*9.0 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:*9.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*9.01VulnerableOpera
cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*9.02VulnerableOpera
cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*9.10VulnerableOpera
cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*9.20VulnerableOpera
cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:*9.20 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*9.21VulnerableOpera
cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*9.22VulnerableOpera
cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*9.23VulnerableOpera
cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*9.24VulnerableOpera
cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*9.25VulnerableOpera
cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:*9.26VulnerableOpera
cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:*9.27VulnerableOpera
cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:*9.50VulnerableOpera
cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:*9.50 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:*9.51VulnerableOpera
  • cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:* Versions 5.8 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:* Versions 5.9 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:* Versions 5.11 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:* Versions 5.12 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:* Versions 6 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:* Versions 6.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:* Versions 6.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:* Versions 6.03 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:* Versions 6.04 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:* Versions 6.05 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:* Versions 6.06 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:* Versions 7 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7:beta_1.2:*:*:*:*:*:* Versions 7 beta_1.2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:* Versions 7.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:* Versions 7.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:* Versions 7.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:* Versions 7.03 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:* Versions 7.10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:* Versions 7.11 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:* Versions 7.20 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:* Versions 7.20 beta7 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:* Versions 7.21 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:* Versions 7.22 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:* Versions 7.23 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:* Versions 7.50 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:* Versions 7.50 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:* Versions 7.51 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:* Versions 7.52 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:* Versions 7.53 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:* Versions 7.54 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:* Versions 7.54 update_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:* Versions 7.54 update_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:* Versions 8.0 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:* Versions 8.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:* Versions 8.0 beta_3 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:* Versions 8.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:* Versions 8.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:* Versions 8.50 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:* Versions 8.51 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:* Versions 8.52 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:* Versions 8.53 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:* Versions 8.54 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:* Versions 9.0 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:* Versions 9.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:* Versions 9.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:* Versions 9.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:* Versions 9.10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:* Versions 9.20 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:* Versions 9.20 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:* Versions 9.21 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:* Versions 9.22 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:* Versions 9.23 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:* Versions 9.24 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:* Versions 9.25 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:* Versions 9.26 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:* Versions 9.27 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:* Versions 9.50 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:* Versions 9.50 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:* Versions 9.51 Vulnerable ·Opera

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-4696
  2. 2026-10-03 Alias added: GHSA-g928-9c86-8mr8

References

Exploit 1

Patch 3

Advisory 4

Other 6

  • TI-2008-04929 Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute… CVSS 2.0HIGH 9.3
  • TI-2008-04094 Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol… CVSS 2.0HIGH 10.0
  • TI-2008-01689 Opera before 9.27 allows remote attackers to cause a denial of service (crash) and… CVSS 2.0HIGH 9.3
  • TI-2008-04478 Opera before 9.60 allows remote attackers to obtain sensitive information and have… CVSS 2.0HIGH 9.3
  • TI-2008-02947 Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute… CVSS 2.0HIGH 10.0
  • TI-2008-04577 Opera before 9.62 allows remote attackers to execute arbitrary commands via the History… CVSS 2.0HIGH 9.3
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences