CVE-2008-4199

Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."

• CWE-200

• http://bugs.gentoo.org/show_bug.cgi?id=235298
• http://secunia.com/advisories/31549Vendor Advisory
• http://secunia.com/advisories/32538Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200811-01.xml
• http://securitytracker.com/id?1020722
• http://www.openwall.com/lists/oss-security/2008/09/19/2
• http://www.openwall.com/lists/oss-security/2008/09/24/4
• http://www.opera.com/docs/changelogs/freebsd/952/
• http://www.opera.com/docs/changelogs/linux/952/
• http://www.opera.com/docs/changelogs/mac/952/
• http://www.opera.com/docs/changelogs/solaris/952/
• http://www.opera.com/docs/changelogs/windows/952/
• http://www.opera.com/support/search/view/896/
• http://www.securityfocus.com/bid/30768
• http://www.vupen.com/english/advisories/2008/2416Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44557
• http://bugs.gentoo.org/show_bug.cgi?id=235298
• http://secunia.com/advisories/31549Vendor Advisory
• http://secunia.com/advisories/32538Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200811-01.xml
• http://securitytracker.com/id?1020722
• http://www.openwall.com/lists/oss-security/2008/09/19/2
• http://www.openwall.com/lists/oss-security/2008/09/24/4
• http://www.opera.com/docs/changelogs/freebsd/952/
• http://www.opera.com/docs/changelogs/linux/952/
• http://www.opera.com/docs/changelogs/mac/952/
• http://www.opera.com/docs/changelogs/solaris/952/
• http://www.opera.com/docs/changelogs/windows/952/
• http://www.opera.com/support/search/view/896/
• http://www.securityfocus.com/bid/30768
• http://www.vupen.com/english/advisories/2008/2416Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44557

Published

Sep 27, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4193Stack-based buffer overflow in SecurityGateway.dll in Alt-N …
• CVE-2008-4194The p_exec_query function in src/dns_query.c in pdnsd before…
• CVE-2008-4195Opera before 9.52 does not properly restrict the ability of …
• CVE-2008-4196Cross-site scripting (XSS) vulnerability in Opera before 9.5…
• CVE-2008-4197Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, w…8.8
• CVE-2008-4198Opera before 9.52, when rendering an http page that has load…
• CVE-2008-4200Opera before 9.52 does not ensure that the address field of …
• CVE-2008-4201Heap-based buffer overflow in the decodeMP4file function (fr…
• CVE-2008-4202SQL injection vulnerability in index.php in Gonafish LinksCa…
• CVE-2008-4203SQL injection vulnerability in cn_users.php in CzarNews 1.20…
• CVE-2008-4204SQL injection vulnerability in city.asp in SoftAcid Hotel Re…
• CVE-2008-4205SQL injection vulnerability in search.php Attachmax Dolphin …