CVE-2008-4197

HighCVSS 8.8/10Last modified Jun 16, 2026

Description

Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-908

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Sep 27, 2008
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2008

CVE-2008-41985.0Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security infCVE-2008-41995.0Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers toCVE-2008-42006.4Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to cCVE-2008-42019.3Heap-based buffer overflow in the decodeMP4file function (frontend/main.c) in FAAD2 2.6.1 and earlier allows remote attackers to cause a denCVE-2008-42027.5SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL commands via the iddCVE-2008-42037.5SQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary SQL commands via a recCVE-2008-42047.5SQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System (HRS) allows remote attackers to execute arbitrary SQL commandsCVE-2008-42057.5SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via CVE-2008-42067.5PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is enabled, allows remotCVE-2008-42075.0Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers to obtain sensitiveCVE-2008-420810.0Unspecified vulnerability in OSADS Alliance Database before 2.1 has unknown impact and attack vectors, possibly related to includes/functionCVE-2008-42104.6fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows loc
CVE-2008-4197: High severity, CVSS 8.8 | Vulnix