CVE-2008-4199
Opera before 9.52 does not prevent use of links from web pages to feed source files on the local...
Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."
Exploit likelihood
What each source reports
NVD Score used
Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."
- Record
CVE-2008-4199- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."
- Record
CVE-2008-4199- Updated
- 2026-11-02
EUVDEUVD-2008-4182 No score
Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."
- Record
EUVD-2008-4182- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xgh3-px9j-7w6v No score
Opera before 9.52 does not prevent use of links from web pages to feed source files on the local...
Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."
- Record
GHSA-xgh3-px9j-7w6v- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4199 is a medium vulnerability (CVSS 5.0) in Opera Browser, published September 27, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.86%, the 86th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2008/2416
opera.com/support/search/view/896
secunia.com/advisories/32538
exchange.xforce.ibmcloud.com/vulnerabilities/44557
Show 12 moreShow less
securitytracker.com/id?1020722
securityfocus.com/bid/30768
openwall.com/lists/oss-security/2008/09/24/4
bugs.gentoo.org/show_bug.cgi?id=235298
security.gentoo.org/glsa/glsa-200811-01.xml
nvd.nist.gov/vuln/detail/CVE-2008-4199
github.com/advisories/GHSA-xgh3-px9j-7w6v