NVD

Id
4512  
Name
CVE-2008-4698  
Description
Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new feed subscriptions and read the contents of arbitrary feeds.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-10-23  
Modified Date
2011-03-07  
Seq
2008-4698  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
28431 4512 CVE-2008-4698 SUSE-SR:2008:022  View
28432 4512 CVE-2008-4698 GLSA-200811-01  View
28433 4512 CVE-2008-4698 [oss-security] 20081021 Re: CVE Request: Opera 9.60 with security fixes  View
28434 4512 CVE-2008-4698 [oss-security] 20081022 Re: CVE Request: Opera 9.60 with security fixes  View
28435 4512 CVE-2008-4698 http://www.opera.com/docs/changelogs/freebsd/961/  View
28436 4512 CVE-2008-4698 http://www.opera.com/docs/changelogs/linux/961/  View
28437 4512 CVE-2008-4698 http://www.opera.com/docs/changelogs/mac/961/  View
28438 4512 CVE-2008-4698 http://www.opera.com/docs/changelogs/solaris/961/  View
28439 4512 CVE-2008-4698 http://www.opera.com/docs/changelogs/windows/961/  View
28440 4512 CVE-2008-4698 http://www.opera.com/support/search/view/905/  View
28441 4512 CVE-2008-4698 31842  View
28442 4512 CVE-2008-4698 ADV-2008-2873  View
28443 4512 CVE-2008-4698 opera-newsfeed1-weak-security(46005)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47173 JVNDB-2008-002483 Opera における新規フィードの購読を作成される脆弱性 Opera は、ニュースフィードのプレビューの際、スクリプトを適切にブロックしないため、新規フィードの購読を作成される、および任意のフィードのコンテンツを読まれる脆弱性が存在します。 CVE-2008-4698 34811 CVE-2008-4698 4512 5.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002483.html 2008-10-23 2010-09-27 View