CVE-2008-4198
Opera before 9.52, when rendering an http page that has loaded an https page into a frame,...
Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote attackers to trick a user into performing unsafe actions on the http page.
Exploit likelihood
What each source reports
NVD Score used
Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote attackers to trick a user into performing unsafe actions on the http page.
- Record
CVE-2008-4198- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote attackers to trick a user into performing unsafe actions on the http page.
- Record
CVE-2008-4198- Updated
- 2026-11-02
EUVDEUVD-2008-4181 No score
Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote attackers to trick a user into performing unsafe actions on the http page.
- Record
EUVD-2008-4181- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6gww-pqcg-wr93 No score
Opera before 9.52, when rendering an http page that has loaded an https page into a frame,...
Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote attackers to trick a user into performing unsafe actions on the http page.
- Record
GHSA-6gww-pqcg-wr93- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4198 is a medium vulnerability (CVSS 5.0) in Opera Browser, published September 27, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.84%, the 86th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2008/2416
securitytracker.com/id?1020721
secunia.com/advisories/32538
opera.com/support/search/view/895
Show 12 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/44555
securityfocus.com/bid/30768
openwall.com/lists/oss-security/2008/09/24/4
bugs.gentoo.org/show_bug.cgi?id=235298
security.gentoo.org/glsa/glsa-200811-01.xml
nvd.nist.gov/vuln/detail/CVE-2008-4198
github.com/advisories/GHSA-6gww-pqcg-wr93