1. CVE-Search
  2. CVE-2008-1761
ID CVE-2008-1761
Summary Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access.
References
Vulnerable Configurations
  • cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*
    cpe:2.3:a:opera:opera:9.02:*:*:*:*:*:*:*
  • cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*
    cpe:2.3:a:opera:opera:9.10:*:*:*:*:*:*:*
  • cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*
    cpe:2.3:a:opera:opera:9.20:*:*:*:*:*:*:*
  • cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*
    cpe:2.3:a:opera:opera:9.21:*:*:*:*:*:*:*
  • cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*
    cpe:2.3:a:opera:opera:9.22:*:*:*:*:*:*:*
  • cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*
    cpe:2.3:a:opera:opera:9.23:*:*:*:*:*:*:*
  • cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*
    cpe:2.3:a:opera:opera:9.24:*:*:*:*:*:*:*
  • cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*
    cpe:2.3:a:opera:opera:9.25:*:*:*:*:*:*:*
  • cpe:2.3:a:opera:opera:-:*:*:*:*:android:*:*
    cpe:2.3:a:opera:opera:-:*:*:*:*:android:*:*
CVSS
Base: 9.3 (as of 08-08-2017 - 01:30)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
refmap via4
bid 28585
confirm
gentoo GLSA-200804-14
secunia
  • 29662
  • 29679
  • 29735
suse SUSE-SR:2008:009
vupen ADV-2008-1084
xf opera-newsfeed-code-execution(41625)
Last major update 08-08-2017 - 01:30
Published 12-04-2008 - 20:05
Last modified 08-08-2017 - 01:30
Back to Top