CVE-2008-1081: Code Injection
Published Feb 29, 2008
·Updated
Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties.
Affected Software
103 affected components
opera Opera Browser=4.01
opera Opera Browser=7.01
opera Opera Browser=7.23
opera Opera Browser=2.10
opera Opera Browser=9.02
opera Opera Browser=2.10-beta2
opera Opera Browser=7.03
opera Opera Browser=7.53
opera Opera Browser=4.00-beta6
opera Opera Browser=8.50
opera Opera Browser=9.24
opera Opera Browser=4.00-beta3
opera Opera Browser=5.0-beta2
opera Opera Browser=5.11
opera Opera Browser=3.51
opera Opera Browser=6.1
opera Opera Browser=7.20
opera Opera Browser=6.02
opera Opera Browser=2.00
opera Opera Browser=5.02
opera Opera Browser=1.00
opera Opera Browser=5.10
opera Opera Browser=8.53
opera Opera Browser=9.12
opera Opera Browser=7.11-beta2
opera Opera Browser=8.0
opera Opera Browser=4.00
opera Opera Browser=2.10-beta1
opera Opera Browser=6.04
opera Opera Browser=8.54
opera Opera Browser=6.11
opera Opera Browser=5.0-beta4
opera Opera Browser=6.05
opera Opera Browser=8.02
opera Opera Browser=9.20
opera Opera Browser=7.50-beta1
opera Opera Browser=3.10
opera Opera Browser=5.12
opera Opera Browser=4.02
opera Opera Browser=9.21
opera Opera Browser=7.10
opera Opera Browser<=9.25
opera Opera Browser=9.0-beta1
opera Opera Browser=6.0-tp3
opera Opera Browser=3.50
opera Opera Browser=9.23
opera Opera Browser=6.0-tp1
opera Opera Browser=8.0-beta3
opera Opera Browser=3.61
opera Opera Browser=5.0-beta8
opera Opera Browser=7.0-beta1_v2
opera Opera Browser=3.00-beta
opera Opera Browser=8.51
opera Opera Browser=5.0-beta5
opera Opera Browser=4.00-beta5
opera Opera Browser=7.50
opera Opera Browser=7.02
opera Opera Browser=7.21
opera Opera Browser=6.0-tp2
opera Opera Browser=5.0-beta7
opera Opera Browser=7.20-beta7
opera Opera Browser=7.54-update1
opera Opera Browser=9.20-beta1
opera Opera Browser=7.60
opera Opera Browser=7.11
opera Opera Browser=7.0-beta2
opera Opera Browser=4.00-beta2
opera Opera Browser=7.54
opera Opera Browser=9.0-beta2
opera Opera Browser=6.03
opera Opera Browser=3.00
opera Opera Browser=7.0-beta1
opera Opera Browser=9.22
opera Opera Browser=6.0-beta1
opera Opera Browser=3.62
opera Opera Browser=2.10-beta3
opera Opera Browser=9.01
opera Opera Browser=9.0
opera Opera Browser=3.60
opera Opera Browser=5.0
opera Opera Browser=7.51
opera Opera Browser=8.0-beta2
opera Opera Browser=9.10
opera Opera Browser=3.62-beta
opera Opera Browser=6.12
opera Opera Browser=6.0-beta2
opera Opera Browser=4.00-beta4
opera Opera Browser=5.0-beta3
opera Opera Browser=6.01
opera Opera Browser=8.52
opera Opera Browser=6.06
opera Opera Browser=7.52
opera Opera Browser=7.54-update2
opera Opera Browser=3.21
opera Opera Browser=5.0-beta6
opera Opera Browser=8.01
opera Opera Browser=6.1-beta1
opera Opera Browser=2.12
opera Opera Browser=8.0-beta1
opera Opera Browser=6.0
opera Opera Browser=7.22
opera Opera Browser=7.10-beta1
opera Opera Browser=7.0
Remediation
Patch Available
Event History
Feb 29, 2008
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1081?
CVE-2008-1081 has a moderate severity rating due to the potential for remote code execution via crafted images.
2
How do I fix CVE-2008-1081?
To fix CVE-2008-1081, users should upgrade to Opera version 9.26 or later.
3
What versions of Opera are affected by CVE-2008-1081?
CVE-2008-1081 affects all versions of Opera prior to 9.26, including versions 1.00 to 9.25.
4
Can CVE-2008-1081 be exploited without user interaction?
No, CVE-2008-1081 requires user interaction to exploit, as it involves displaying image properties.
5
What kind of attack does CVE-2008-1081 facilitate?
CVE-2008-1081 facilitates a script injection attack through specially crafted images that exploit user-assisted actions.