Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-4197

EPSS 5.08% · P90
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-4197

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Opera Web浏览器快捷方式和菜单用户欺骗漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Opera是挪威欧朋（Opera Software）公司所开发的一款Web浏览器，它支持多窗口浏览、可定制用户界面等。 Opera的9.52之前版本中存在多个安全漏洞，恶意用户可以执行欺骗和跨站脚本、泄露敏感信息或完全入侵用户系统。处理自定义快捷方式和菜单命令时存在错误，允许以危险的参数执行应用程序。成功利用这个漏洞要求能够诱骗用户修改快捷方式或菜单文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-4197

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-4197

Please Login to view more intelligence information

Same Patch Batch · n/a · 2008-09-27 · 16 CVEs total

CVE-2008-3528Linux kernel 权限许可和访问控制问题漏洞
CVE-2008-4070Mozilla SeaMonkey 新闻文章缓冲区溢出漏洞
CVE-2008-4119CA Service Desk Web表单多个跨站脚本漏洞
CVE-2008-4195Opera Web浏览器用户欺骗漏洞
CVE-2008-4196Opera 未明跨站脚本攻击漏洞
CVE-2008-4198Opera 网页安全检查用户欺骗漏洞
CVE-2008-4199Opera 网页检查用户欺骗漏洞
CVE-2008-4200Opera URL检查用户欺骗漏洞
CVE-2008-4292opera CRL检查信任管理漏洞
CVE-2008-4293Microsoft Windows Opera 未明漏洞
CVE-2008-4294IBM Tivoli Netcool/Webtop权限提升漏洞
CVE-2008-4295Microsoft Windows Mobile Bluetooth设备拒绝服务漏洞
CVE-2008-4296Cisco Linksys WRT350N "firmware" 信任管理漏洞
CVE-2008-4297Mercurial "allowpull" 权限许可和访问控制漏洞
CVE-2008-4298Lighttpd 'request.c' http_request_parse函数内存泄露漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-4197

No comments yet

Leave a comment