CVE-2008-4292: Critical severity web browser for android vulnerability

Published Sep 27, 2008
·
Updated

Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vectors. NOTE: it is not clear whether this is a vulnerability, but the vendor included it in a security section of the advisory.

Affected Software

85 affected components
opera Opera Browser=7.01
opera Opera Browser=9.27
opera Opera Browser=7.23
opera Opera Browser=9.50-beta1
opera Opera Browser=9.02
opera Opera Browser=7.03
opera Opera Browser=7.53
opera Opera Browser=8.50
opera Opera Browser=9.50
opera Opera Browser=9.24
opera Opera Browser=5.0-beta2
opera Opera Browser=5.11
opera Opera Browser=6.1
opera Opera Browser=7.20
opera Opera Browser=6.02
opera Opera Browser=5.02
opera Opera Browser=9.26
opera Opera Browser=5.10
opera Opera Browser=8.53
opera Opera Browser=9.12
opera Opera Browser=7.11-beta2
opera Opera Browser=8.0
opera Opera Browser=6.0-beta3
opera Opera Browser=6.04
opera Opera Browser=8.54
opera Opera Browser=6.11
opera Opera Browser=5.0-beta4
opera Opera Browser=6.05
opera Opera Browser=8.02
opera Opera Browser=9.20
opera Opera Browser=7.50-beta1
opera Opera Browser=5.12
opera Opera Browser=9.21
opera Opera Browser=7.10
opera Opera Browser=9.0-beta1
opera Opera Browser<=9.51
opera Opera Browser=6.0-tp3
opera Opera Browser=9.23
opera Opera Browser=6.0-tp1
opera Opera Browser=8.0-beta3
opera Opera Browser=5.0-beta8
opera Opera Browser=7.0-beta1_v2
opera Opera Browser=8.51
opera Opera Browser=5.0-beta5
opera Opera Browser=7.50
opera Opera Browser=7.02
opera Opera Browser=7.21
opera Opera Browser=6.0-tp2
opera Opera Browser=5.0-beta7
opera Opera Browser=7.20-beta7
opera Opera Browser=7.54-update1
opera Opera Browser=9.20-beta1
opera Opera Browser=7.60
opera Opera Browser=7.11
opera Opera Browser=7.0-beta2
opera Opera Browser=7.54
opera Opera Browser=9.0-beta2
opera Opera Browser=6.03
opera Opera Browser=7.0-beta1
opera Opera Browser=9.22
opera Opera Browser=6.0-beta1
opera Opera Browser=9.01
opera Opera Browser=9.0
opera Opera Browser=5.0
opera Opera Browser=9.25
opera Opera Browser=7.51
opera Opera Browser=8.0-beta2
opera Opera Browser=9.10
opera Opera Browser=9.50-beta2
opera Opera Browser=6.12
opera Opera Browser=6.0-beta2
opera Opera Browser=5.0-beta3
opera Opera Browser=6.01
opera Opera Browser=8.52
opera Opera Browser=6.06
opera Opera Browser=7.52
opera Opera Browser=7.54-update2
opera Opera Browser=5.0-beta6
opera Opera Browser=8.01
opera Opera Browser=6.1-beta1
opera Opera Browser=8.0-beta1
opera Opera Browser=6.0
opera Opera Browser=7.22
opera Opera Browser=7.10-beta1
opera Opera Browser=7.0

Event History

Sep 27, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2008-4292?

CVE-2008-4292 is considered to have an unknown impact and attack vectors, and its severity is not clearly defined.

2

How do I fix CVE-2008-4292?

The recommended action is to upgrade to a version of the Opera browser that is later than 9.51.

3

Which versions of Opera are affected by CVE-2008-4292?

CVE-2008-4292 affects versions of the Opera browser prior to 9.52, including some specific older versions.

4

Is CVE-2008-4292 actually a vulnerability?

It is not definitively established as a vulnerability, but it was included in Opera's security advisory.

5

What should users do to protect against issues related to CVE-2008-4292?

Users should ensure they are using an updated version of the Opera browser to mitigate any potential risks.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203