CVEvulnerability

CVE-2008-4695

9.3 HIGH Published 2008-10-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-10-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-200

Description

Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache pathname of a cached Java applet and then launching this applet from the cache, leading to applet execution within the local-machine context.

Affected configurations

• opera opera (<= 9.60) • opera opera 5.0 • opera opera 5.02 • opera opera 5.10 • opera opera 5.11 • opera opera 5.12 • opera opera 6.0 • opera opera 6.1 • opera opera 6.01 • opera opera 6.02 • opera opera 6.03 • opera opera 6.04 • opera opera 6.05 • opera opera 6.06 • opera opera 6.11 • opera opera 6.12 • opera opera 7.0 • opera opera 7.01 • opera opera 7.02 • opera opera 7.03 • opera opera 7.10 • opera opera 7.11 • opera opera 7.20 • opera opera 7.21 • opera opera 7.22 • opera opera 7.23 • opera opera 7.50 • opera opera 7.51 • opera opera 7.52 • opera opera 7.53 • opera opera 7.54 • opera opera 8.0 • opera opera 8.01 • opera opera 8.02 • opera opera 8.50 • opera opera 8.51 • opera opera 8.52 • opera opera 8.53 • opera opera 8.54 • opera opera 9.0 • opera opera 9.01 • opera opera 9.02 • opera opera 9.10 • opera opera 9.20 • opera opera 9.21 • opera opera 9.22 • opera opera 9.23 • opera opera 9.24 • opera opera 9.25 • opera opera 9.26 • opera opera 9.27 • opera opera 9.50 • opera opera 9.51 • opera opera 9.52

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References