CVE-2008-4197
Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and...
Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.
- Record
CVE-2008-4197- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-908
- Updated
- 2026-11-02
CVE List No score
Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.
- Record
CVE-2008-4197- Updated
- 2026-11-02
EUVDEUVD-2008-4180 No score
Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.
- Record
EUVD-2008-4180- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5854-w8p6-9244
Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and...
Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.
- Record
GHSA-5854-w8p6-9244- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-908
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4197 is a high vulnerability (CVSS 8.8) in Opera Browser, published September 27, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.33%, the 93rd percentile. No source names a fixed version.
References
vupen.com/english/advisories/2008/2416
secunia.com/advisories/32538
exchange.xforce.ibmcloud.com/vulnerabilities/44552
opera.com/docs/changelogs/solaris/952
securitytracker.com/id?1020720
securityfocus.com/bid/30768
Show 11 moreShow less
openwall.com/lists/oss-security/2008/09/24/4
bugs.gentoo.org/show_bug.cgi?id=235298
security.gentoo.org/glsa/glsa-200811-01.xml
nvd.nist.gov/vuln/detail/CVE-2008-4197
github.com/advisories/GHSA-5854-w8p6-9244