Read the docs
TI-2008-04577 Aliases CVE-2008-4794GHSA-w52x-q56h-pqx3

Opera before 9.62 allows remote attackers to execute arbitrary commands via the History…

Priority MEDIUM 47CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Opera before 9.62 allows remote attackers to execute arbitrary commands via the History Search results page, a different vulnerability than CVE-2008-4696.

Why it matters now

EPSS 0.04504 91st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 73

CPEVersionsRoleVendor
cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*up to 9.61VulnerableOpera
cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:*5..10VulnerableOpera
cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*5.0VulnerableOpera
cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:*5.1VulnerableOpera
cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:*5.2VulnerableOpera
cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:*5.3VulnerableOpera
cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:*5.4VulnerableOpera
cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:*5.5VulnerableOpera
cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:*5.6VulnerableOpera
cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:*5.7VulnerableOpera
  • cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:* Versions up to 9.61 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:* Versions 5..10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:* Versions 5.2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:* Versions 5.3 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:* Versions 5.4 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:* Versions 5.5 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:* Versions 5.6 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:* Versions 5.7 Vulnerable ·Opera
Show 63 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:*5.8VulnerableOpera
cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:*5.9VulnerableOpera
cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:*5.11VulnerableOpera
cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:*5.12VulnerableOpera
cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:*6 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:*6.0VulnerableOpera
cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:*6.01VulnerableOpera
cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:*6.02VulnerableOpera
cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:*6.03VulnerableOpera
cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:*6.04VulnerableOpera
cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:*6.05VulnerableOpera
cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:*6.06VulnerableOpera
cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:*7 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:7:beta_1.2:*:*:*:*:*:*7 beta_1.2VulnerableOpera
cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:*7.0VulnerableOpera
cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:*7.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:*7.01VulnerableOpera
cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:*7.02VulnerableOpera
cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:*7.03VulnerableOpera
cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:*7.10VulnerableOpera
cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:*7.11VulnerableOpera
cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:*7.20VulnerableOpera
cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:*7.20 beta7VulnerableOpera
cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:*7.21VulnerableOpera
cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:*7.22VulnerableOpera
cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:*7.23VulnerableOpera
cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:*7.50VulnerableOpera
cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:*7.50 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:*7.51VulnerableOpera
cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:*7.52VulnerableOpera
cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:*7.53VulnerableOpera
cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:*7.54VulnerableOpera
cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:*7.54 update_1VulnerableOpera
cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:*7.54 update_2VulnerableOpera
cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:*8.0VulnerableOpera
cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:*8.0 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:*8.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:*8.0 beta_3VulnerableOpera
cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:*8.01VulnerableOpera
cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:*8.02VulnerableOpera
cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:*8.50VulnerableOpera
cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:*8.51VulnerableOpera
cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:*8.52VulnerableOpera
cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:*8.53VulnerableOpera
cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:*8.54VulnerableOpera
cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:*9.0VulnerableOpera
cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:*9.0 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:*9.0 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:*9.01VulnerableOpera
cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*9.02VulnerableOpera
cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*9.10VulnerableOpera
cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*9.20VulnerableOpera
cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:*9.20 beta_1VulnerableOpera
cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*9.21VulnerableOpera
cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*9.22VulnerableOpera
cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*9.23VulnerableOpera
cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*9.24VulnerableOpera
cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*9.25VulnerableOpera
cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:*9.26VulnerableOpera
cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:*9.27VulnerableOpera
cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:*9.50VulnerableOpera
cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:*9.50 beta_2VulnerableOpera
cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:*9.51VulnerableOpera
  • cpe:2.3:a:opera:opera:5.8:*:*:*:*:*:*:* Versions 5.8 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.9:*:*:*:*:*:*:* Versions 5.9 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.11:*:*:*:*:*:*:* Versions 5.11 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:5.12:*:*:*:*:*:*:* Versions 5.12 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6:beta_1:*:*:*:*:*:* Versions 6 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.01:*:*:*:*:*:*:* Versions 6.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.02:*:*:*:*:*:*:* Versions 6.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.03:*:*:*:*:*:*:* Versions 6.03 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.04:*:*:*:*:*:*:* Versions 6.04 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.05:*:*:*:*:*:*:* Versions 6.05 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:6.06:*:*:*:*:*:*:* Versions 6.06 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7:beta_1:*:*:*:*:*:* Versions 7 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7:beta_1.2:*:*:*:*:*:* Versions 7 beta_1.2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.0:beta_2:*:*:*:*:*:* Versions 7.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.01:*:*:*:*:*:*:* Versions 7.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.02:*:*:*:*:*:*:* Versions 7.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.03:*:*:*:*:*:*:* Versions 7.03 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.10:*:*:*:*:*:*:* Versions 7.10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.11:*:*:*:*:*:*:* Versions 7.11 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.20:*:*:*:*:*:*:* Versions 7.20 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.20:beta7:*:*:*:*:*:* Versions 7.20 beta7 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.21:*:*:*:*:*:*:* Versions 7.21 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.22:*:*:*:*:*:*:* Versions 7.22 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.23:*:*:*:*:*:*:* Versions 7.23 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.50:*:*:*:*:*:*:* Versions 7.50 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.50:beta_1:*:*:*:*:*:* Versions 7.50 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.51:*:*:*:*:*:*:* Versions 7.51 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.52:*:*:*:*:*:*:* Versions 7.52 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.53:*:*:*:*:*:*:* Versions 7.53 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.54:*:*:*:*:*:*:* Versions 7.54 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.54:update_1:*:*:*:*:*:* Versions 7.54 update_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:7.54:update_2:*:*:*:*:*:* Versions 7.54 update_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:beta_1:*:*:*:*:*:* Versions 8.0 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:beta_2:*:*:*:*:*:* Versions 8.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.0:beta_3:*:*:*:*:*:* Versions 8.0 beta_3 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.01:*:*:*:*:*:*:* Versions 8.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.02:*:*:*:*:*:*:* Versions 8.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.50:*:*:*:*:*:*:* Versions 8.50 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.51:*:*:*:*:*:*:* Versions 8.51 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.52:*:*:*:*:*:*:* Versions 8.52 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.53:*:*:*:*:*:*:* Versions 8.53 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:8.54:*:*:*:*:*:*:* Versions 8.54 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.0:beta_1:*:*:*:*:*:* Versions 9.0 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.0:beta_2:*:*:*:*:*:* Versions 9.0 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.01:*:*:*:*:*:*:* Versions 9.01 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:* Versions 9.02 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:* Versions 9.10 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:* Versions 9.20 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.20:beta_1:*:*:*:*:*:* Versions 9.20 beta_1 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:* Versions 9.21 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:* Versions 9.22 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:* Versions 9.23 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:* Versions 9.24 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:* Versions 9.25 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.26:*:*:*:*:*:*:* Versions 9.26 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.27:*:*:*:*:*:*:* Versions 9.27 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.50:*:*:*:*:*:*:* Versions 9.50 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.50:beta_2:*:*:*:*:*:* Versions 9.50 beta_2 Vulnerable ·Opera
  • cpe:2.3:a:opera:opera:9.51:*:*:*:*:*:*:* Versions 9.51 Vulnerable ·Opera

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-4794
  2. 2026-10-03 Alias added: GHSA-w52x-q56h-pqx3

References

Patch 1

Advisory 2

  • TI-2008-04929 Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute… CVSS 2.0HIGH 9.3
  • TI-2008-04479 Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote… CVSS 2.0MEDIUM 4.3
  • TI-2008-04094 Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol… CVSS 2.0HIGH 10.0
  • TI-2008-01689 Opera before 9.27 allows remote attackers to cause a denial of service (crash) and… CVSS 2.0HIGH 9.3
  • TI-2008-04478 Opera before 9.60 allows remote attackers to obtain sensitive information and have… CVSS 2.0HIGH 9.3
  • TI-2008-02947 Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute… CVSS 2.0HIGH 10.0
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences