NVD Vulnerability Detail

CVE-2008-4293

Summary	Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors in which Opera is launched by other applications.
Publication Date	Sept. 27, 2008, 7:30 p.m.
Registration Date	Jan. 29, 2021, 1:42 p.m.
Last Update	Aug. 8, 2017, 10:32 a.m.

CVSS2.0 : HIGH
Score	10.0
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
Get all privileges.	はい
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:opera:opera:5..10:::::::*
cpe:2.3:a:opera:opera:5.0:::::::*
cpe:2.3:a:opera:opera:5.1:::::::*
cpe:2.3:a:opera:opera:5.2:::::::*
cpe:2.3:a:opera:opera:5.3:::::::*
cpe:2.3:a:opera:opera:5.4:::::::*
cpe:2.3:a:opera:opera:5.5:::::::*
cpe:2.3:a:opera:opera:5.6:::::::*
cpe:2.3:a:opera:opera:5.7:::::::*
cpe:2.3:a:opera:opera:5.8:::::::*
cpe:2.3:a:opera:opera:5.9:::::::*
cpe:2.3:a:opera:opera:5.11:::::::*
cpe:2.3:a:opera:opera:5.12:::::::*
cpe:2.3:a:opera:opera:6:beta_1::::::
cpe:2.3:a:opera:opera:6.0:::::::*
cpe:2.3:a:opera:opera:6.01:::::::*
cpe:2.3:a:opera:opera:6.02:::::::*
cpe:2.3:a:opera:opera:6.03:::::::*
cpe:2.3:a:opera:opera:6.04:::::::*
cpe:2.3:a:opera:opera:6.05:::::::*
cpe:2.3:a:opera:opera:6.06:::::::*
cpe:2.3:a:opera:opera:7:beta_1::::::
cpe:2.3:a:opera:opera:7:beta_1.2::::::
cpe:2.3:a:opera:opera:7.0:::::::*
cpe:2.3:a:opera:opera:7.0:beta_2::::::
cpe:2.3:a:opera:opera:7.01:::::::*
cpe:2.3:a:opera:opera:7.02:::::::*
cpe:2.3:a:opera:opera:7.03:::::::*
cpe:2.3:a:opera:opera:7.10:::::::*
cpe:2.3:a:opera:opera:7.11:::::::*
cpe:2.3:a:opera:opera:7.20:::::::*
cpe:2.3:a:opera:opera:7.20:beta7::::::
cpe:2.3:a:opera:opera:7.21:::::::*
cpe:2.3:a:opera:opera:7.22:::::::*
cpe:2.3:a:opera:opera:7.23:::::::*
cpe:2.3:a:opera:opera:7.50:::::::*
cpe:2.3:a:opera:opera:7.50:beta_1::::::
cpe:2.3:a:opera:opera:7.51:::::::*
cpe:2.3:a:opera:opera:7.52:::::::*
cpe:2.3:a:opera:opera:7.53:::::::*
cpe:2.3:a:opera:opera:7.54:::::::*
cpe:2.3:a:opera:opera:7.54:update_1::::::
cpe:2.3:a:opera:opera:7.54:update_2::::::
cpe:2.3:a:opera:opera:8.0:::::::*
cpe:2.3:a:opera:opera:8.0:beta_1::::::
cpe:2.3:a:opera:opera:8.0:beta_2::::::
cpe:2.3:a:opera:opera:8.0:beta_3::::::
cpe:2.3:a:opera:opera:8.01:::::::*
cpe:2.3:a:opera:opera:8.02:::::::*
cpe:2.3:a:opera:opera:8.50:::::::*
cpe:2.3:a:opera:opera:8.51:::::::*
cpe:2.3:a:opera:opera:8.52:::::::*
cpe:2.3:a:opera:opera:8.53:::::::*
cpe:2.3:a:opera:opera:8.54:::::::*
cpe:2.3:a:opera:opera:9.0:::::::*
cpe:2.3:a:opera:opera:9.0:beta_1::::::
cpe:2.3:a:opera:opera:9.0:beta_2::::::
cpe:2.3:a:opera:opera:9.01:::::::*
cpe:2.3:a:opera:opera:9.02:::::::*
cpe:2.3:a:opera:opera:9.10:::::::*
cpe:2.3:a:opera:opera:9.20:::::::*
cpe:2.3:a:opera:opera:9.20:beta_1::::::
cpe:2.3:a:opera:opera:9.21:::::::*
cpe:2.3:a:opera:opera:9.22:::::::*
cpe:2.3:a:opera:opera:9.23:::::::*
cpe:2.3:a:opera:opera:9.24:::::::*
cpe:2.3:a:opera:opera:9.25:::::::*
cpe:2.3:a:opera:opera:9.26:::::::*
cpe:2.3:a:opera:opera:9.27:::::::*
cpe:2.3:a:opera:opera:9.50:::::::*
cpe:2.3:a:opera:opera:9.50:beta_2::::::
cpe:2.3:a:opera:opera::::::::			9.51
execution environment
1	cpe:2.3:o:microsoft:windows::::::::

Related information, measures and tools

No	URL	refsource
1	http://secunia.com/advisories/31549	SECUNIA
2	http://www.opera.com/docs/changelogs/windows/952/	CONFIRM
3	http://www.opera.com/support/search/view/892/	CONFIRM
4	http://www.securityfocus.com/bid/30768	BID
5	http://www.vupen.com/english/advisories/2008/2416	VUPEN
6	https://exchange.xforce.ibmcloud.com/vulnerabilities/44547	XF

Common Vulnerabilities List

JVN Vulnerability Information

Windows 上で稼働する Opera における任意のコードを実行される脆弱性

Title	Windows 上で稼働する Opera における任意のコードを実行される脆弱性
Summary	Windows 上で稼働する Opera には、プロトコルハンドラとして登録した際の処理に不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。
Possible impacts	第三者により、他のアプリケーションからの Opera の起動を介して、サービス運用妨害 (DoS) 状態にされる、または任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 27, 2008, midnight
Registration Date	Sept. 27, 2010, 4:05 p.m.
Last Update	Sept. 27, 2010, 4:05 p.m.

Affected System

Opera Software ASA

Opera 9.52 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2008-4293	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4293
National Vulnerability Database (NVD)
2	CVE-2008-4293	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-4293

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/CWE.html#CWEnoinfo

ベンダー情報

No	Name	URL
Opera knowledge base
1	892	http://www.opera.com/support/kb/view/892
2	windows/952	http://www.opera.com/docs/changelogs/windows/952

その他

No	Name	URL
ISS X-Force Database
1	44547	http://xforce.iss.net/xforce/xfdb/44547
Secunia Advisory
2	SA31549	http://secunia.com/advisories/31549
VUPEN Security
3	VUPEN/ADV-2008-2416	http://www.vupen.com/english/advisories/2008/2416

Change Log

No	Changed Details	Date of change
0	[2010年09月27日] 掲載	Feb. 17, 2018, 10:37 a.m.

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:opera:opera:5..10:::::::*
cpe:2.3:a:opera:opera:5.0:::::::*
cpe:2.3:a:opera:opera:5.1:::::::*
cpe:2.3:a:opera:opera:5.2:::::::*
cpe:2.3:a:opera:opera:5.3:::::::*
cpe:2.3:a:opera:opera:5.4:::::::*
cpe:2.3:a:opera:opera:5.5:::::::*
cpe:2.3:a:opera:opera:5.6:::::::*
cpe:2.3:a:opera:opera:5.7:::::::*
cpe:2.3:a:opera:opera:5.8:::::::*
cpe:2.3:a:opera:opera:5.9:::::::*
cpe:2.3:a:opera:opera:5.11:::::::*
cpe:2.3:a:opera:opera:5.12:::::::*
cpe:2.3:a:opera:opera:6:beta_1::::::
cpe:2.3:a:opera:opera:6.0:::::::*
cpe:2.3:a:opera:opera:6.01:::::::*
cpe:2.3:a:opera:opera:6.02:::::::*
cpe:2.3:a:opera:opera:6.03:::::::*
cpe:2.3:a:opera:opera:6.04:::::::*
cpe:2.3:a:opera:opera:6.05:::::::*
cpe:2.3:a:opera:opera:6.06:::::::*
cpe:2.3:a:opera:opera:7:beta_1::::::
cpe:2.3:a:opera:opera:7:beta_1.2::::::
cpe:2.3:a:opera:opera:7.0:::::::*
cpe:2.3:a:opera:opera:7.0:beta_2::::::
cpe:2.3:a:opera:opera:7.01:::::::*
cpe:2.3:a:opera:opera:7.02:::::::*
cpe:2.3:a:opera:opera:7.03:::::::*
cpe:2.3:a:opera:opera:7.10:::::::*
cpe:2.3:a:opera:opera:7.11:::::::*
cpe:2.3:a:opera:opera:7.20:::::::*
cpe:2.3:a:opera:opera:7.20:beta7::::::
cpe:2.3:a:opera:opera:7.21:::::::*
cpe:2.3:a:opera:opera:7.22:::::::*
cpe:2.3:a:opera:opera:7.23:::::::*
cpe:2.3:a:opera:opera:7.50:::::::*
cpe:2.3:a:opera:opera:7.50:beta_1::::::
cpe:2.3:a:opera:opera:7.51:::::::*
cpe:2.3:a:opera:opera:7.52:::::::*
cpe:2.3:a:opera:opera:7.53:::::::*
cpe:2.3:a:opera:opera:7.54:::::::*
cpe:2.3:a:opera:opera:7.54:update_1::::::
cpe:2.3:a:opera:opera:7.54:update_2::::::
cpe:2.3:a:opera:opera:8.0:::::::*
cpe:2.3:a:opera:opera:8.0:beta_1::::::
cpe:2.3:a:opera:opera:8.0:beta_2::::::
cpe:2.3:a:opera:opera:8.0:beta_3::::::
cpe:2.3:a:opera:opera:8.01:::::::*
cpe:2.3:a:opera:opera:8.02:::::::*
cpe:2.3:a:opera:opera:8.50:::::::*
cpe:2.3:a:opera:opera:8.51:::::::*
cpe:2.3:a:opera:opera:8.52:::::::*
cpe:2.3:a:opera:opera:8.53:::::::*
cpe:2.3:a:opera:opera:8.54:::::::*
cpe:2.3:a:opera:opera:9.0:::::::*
cpe:2.3:a:opera:opera:9.0:beta_1::::::
cpe:2.3:a:opera:opera:9.0:beta_2::::::
cpe:2.3:a:opera:opera:9.01:::::::*
cpe:2.3:a:opera:opera:9.02:::::::*
cpe:2.3:a:opera:opera:9.10:::::::*
cpe:2.3:a:opera:opera:9.20:::::::*
cpe:2.3:a:opera:opera:9.20:beta_1::::::
cpe:2.3:a:opera:opera:9.21:::::::*
cpe:2.3:a:opera:opera:9.22:::::::*
cpe:2.3:a:opera:opera:9.23:::::::*
cpe:2.3:a:opera:opera:9.24:::::::*
cpe:2.3:a:opera:opera:9.25:::::::*
cpe:2.3:a:opera:opera:9.26:::::::*
cpe:2.3:a:opera:opera:9.27:::::::*
cpe:2.3:a:opera:opera:9.50:::::::*
cpe:2.3:a:opera:opera:9.50:beta_2::::::
cpe:2.3:a:opera:opera::::::::			9.51
execution environment
1	cpe:2.3:o:microsoft:windows::::::::