CVE-2008-4197: opera opera_browser Use of Uninitialized Resource

EPSS trend

Probability

6.33%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.33% on 20-09-2026

20-09-202620-10-2026

EPSS score

6.33%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

15 links

www.vupen.com/english/advisories/2008/2416VDB EntryX Refsource VUPENBroken Link
secunia.com/advisories/32538Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/44552VDB EntryX Refsource XFThird Party Advisory
www.opera.com/docs/changelogs/solaris/952/X Refsource CONFIRMBroken Link
www.securitytracker.com/id?1020720VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
www.securityfocus.com/bid/30768VDB EntryX Refsource BIDBroken LinkThird Party Advisory
www.opera.com/docs/changelogs/windows/952/X Refsource CONFIRMBroken Link
www.opera.com/docs/changelogs/linux/952/X Refsource CONFIRMBroken Link
www.openwall.com/lists/oss-security/2008/09/24/4Mailing ListX Refsource MLIST
www.openwall.com/lists/oss-security/2008/09/19/2Mailing ListX Refsource MLIST

Show all 15 references

secunia.com/advisories/31549Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
bugs.gentoo.org/show_bug.cgi?id=235298X Refsource CONFIRMIssue Tracking
www.opera.com/docs/changelogs/freebsd/952/X Refsource CONFIRMBroken Link
www.opera.com/support/search/view/894/X Refsource CONFIRMBroken Link
security.gentoo.org/glsa/glsa-200811-01.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory

Related vulnerabilities

CVE-2018-18913operaopera_browser0.40%7y ago21-03-2019 21:06Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the target. Once the document is opened, it may allow the attacker to take full control of the system from any location within the system. The issue lies in the loading of the shcore.dll and dcomp.dll files: these files are being searched for by the program in the same system-wide directory where the HTML file is executed.CVE-2018-6608operaopera_browser3.24%8y ago28-03-2018 21:00In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.CVE-2013-1637operaopera_browser4.59%13y ago08-02-2013 11:00Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events.CVE-2013-1638operaopera_browser8.04%13y ago08-02-2013 11:00Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document.CVE-2013-1618operaopera_browser2.16%13y ago08-02-2013 19:00The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.CVE-2013-1639operaopera_browser0.49%13y ago08-02-2013 11:00Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request.

All vulnerabilities inopera_browser

CVE-2008-4197: opera opera_browser Use of Uninitialized Resource

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References