CVE

Id
34314  
CVE No.
CVE-2008-4197  
Status
Candidate  
Description
Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.  
Phase
Assigned (20080923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
375750 34314 CVE-2008-4197 MLIST:[oss-security] 20080919 CVE request: Opera < 9.52 multiple vulnerabilities  View
375751 34314 CVE-2008-4197 URL:http://www.openwall.com/lists/oss-security/2008/09/19/2  View
375752 34314 CVE-2008-4197 MLIST:[oss-security] 20080923 Re: CVE request: Opera < 9.52 multiple vulnerabilities  View
375753 34314 CVE-2008-4197 URL:http://www.openwall.com/lists/oss-security/2008/09/24/4  View
375754 34314 CVE-2008-4197 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=235298  View
375755 34314 CVE-2008-4197 CONFIRM:http://www.opera.com/docs/changelogs/freebsd/952/  View
375756 34314 CVE-2008-4197 CONFIRM:http://www.opera.com/docs/changelogs/linux/952/  View
375757 34314 CVE-2008-4197 CONFIRM:http://www.opera.com/docs/changelogs/solaris/952/  View
375758 34314 CVE-2008-4197 CONFIRM:http://www.opera.com/docs/changelogs/windows/952/  View
375759 34314 CVE-2008-4197 CONFIRM:http://www.opera.com/support/search/view/894/  View
375760 34314 CVE-2008-4197 GENTOO:GLSA-200811-01  View
375761 34314 CVE-2008-4197 URL:http://security.gentoo.org/glsa/glsa-200811-01.xml  View
375762 34314 CVE-2008-4197 BID:30768  View
375763 34314 CVE-2008-4197 URL:http://www.securityfocus.com/bid/30768  View
375764 34314 CVE-2008-4197 SECTRACK:1020720  View
375765 34314 CVE-2008-4197 URL:http://www.securitytracker.com/id?1020720  View
375766 34314 CVE-2008-4197 SECUNIA:32538  View
375767 34314 CVE-2008-4197 URL:http://secunia.com/advisories/32538  View
375768 34314 CVE-2008-4197 SECUNIA:31549  View
375769 34314 CVE-2008-4197 URL:http://secunia.com/advisories/31549  View
375770 34314 CVE-2008-4197 VUPEN:ADV-2008-2416  View
375771 34314 CVE-2008-4197 URL:http://www.vupen.com/english/advisories/2008/2416  View
375772 34314 CVE-2008-4197 XF:opera-shortcuts-code-execution(44552)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48151 JVNDB-2008-003461 FAAD2 の decodeMP4file 関数におけるヒープベースのバッファオーバーフローの脆弱性 FAAD2 の decodeMP4file 関数 (frontend/main.c) には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-4201 34314 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003461.html  View