CVE-2008-5681: Medium severity opera Opera Browser vulnerability
Published Dec 19, 2008
·Updated
Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to read existing subscriptions and force subscriptions to arbitrary feed URLs.
Affected Software
114 affected components
opera Opera Browser=4.01
opera Opera Browser=7.01
opera Opera Browser=9.27
opera Opera Browser=7.23
opera Opera Browser=2.10
opera Opera Browser=9.50-beta1
opera Opera Browser=9.02
opera Opera Browser=2.10-beta2
opera Opera Browser=7.03
opera Opera Browser=7.53
opera Opera Browser=4.00-beta6
opera Opera Browser=8.50
opera Opera Browser=9.50
opera Opera Browser=9.24
opera Opera Browser=4.00-beta3
opera Opera Browser=5.0-beta2
opera Opera Browser=5.11
opera Opera Browser=3.51
opera Opera Browser=6.1
opera Opera Browser=7.20
opera Opera Browser=6.02
opera Opera Browser=2.00
opera Opera Browser=9.51
opera Opera Browser=5.02
opera Opera Browser=1.00
opera Opera Browser=9.26
opera Opera Browser=5.10
opera Opera Browser=8.53
opera Opera Browser=9.12
opera Opera Browser=7.11-beta2
opera Opera Browser=8.0
opera Opera Browser=4.00
opera Opera Browser=2.10-beta1
opera Opera Browser=6.04
opera Opera Browser=8.54
opera Opera Browser=6.11
opera Opera Browser=5.0-beta4
opera Opera Browser=6.05
opera Opera Browser=8.02
opera Opera Browser=9.20
opera Opera Browser=7.50-beta1
opera Opera Browser=3.10
opera Opera Browser=5.12
opera Opera Browser=4.02
opera Opera Browser=9.21
opera Opera Browser=7.10
opera Opera Browser=9.0-beta1
opera Opera Browser=6.0-tp3
opera Opera Browser=3.50
opera Opera Browser=9.23
opera Opera Browser=6.0-tp1
opera Opera Browser=8.0-beta3
opera Opera Browser=3.61
opera Opera Browser=5.0-beta8
opera Opera Browser=9.60
opera Opera Browser=7.0-beta1_v2
opera Opera Browser=3.00-beta
opera Opera Browser=8.51
opera Opera Browser=5.0-beta5
opera Opera Browser=4.00-beta5
opera Opera Browser=7.50
opera Opera Browser=7.02
opera Opera Browser=7.21
opera Opera Browser=6.0-tp2
opera Opera Browser=5.0-beta7
opera Opera Browser<=9.62
opera Opera Browser=7.20-beta7
opera Opera Browser=7.54-update1
opera Opera Browser=9.20-beta1
opera Opera Browser=7.60
opera Opera Browser=7.11
opera Opera Browser=7.0-beta2
opera Opera Browser=4.00-beta2
opera Opera Browser=7.54
opera Opera Browser=9.0-beta2
opera Opera Browser=6.03
opera Opera Browser=3.00
opera Opera Browser=7.0-beta1
opera Opera Browser=9.22
opera Opera Browser=6.0-beta1
opera Opera Browser=3.62
opera Opera Browser=2.10-beta3
opera Opera Browser=9.01
opera Opera Browser=9.0
opera Opera Browser=3.60
opera Opera Browser=5.0
opera Opera Browser=9.25
opera Opera Browser=7.51
opera Opera Browser=8.0-beta2
opera Opera Browser=9.10
opera Opera Browser=9.50-beta2
opera Opera Browser=3.62-beta
opera Opera Browser=6.12
opera Opera Browser=9.60-beta1
opera Opera Browser=6.0-beta2
opera Opera Browser=4.00-beta4
opera Opera Browser=5.0-beta3
opera Opera Browser=6.01
opera Opera Browser=8.52
opera Opera Browser=6.06
opera Opera Browser=7.52
opera Opera Browser=7.54-update2
opera Opera Browser=3.21
opera Opera Browser=5.0-beta6
opera Opera Browser=8.01
opera Opera Browser=6.1-beta1
opera Opera Browser=9.61
opera Opera Browser=2.12
opera Opera Browser=9.52
opera Opera Browser=8.0-beta1
opera Opera Browser=6.0
opera Opera Browser=7.22
opera Opera Browser=7.10-beta1
opera Opera Browser=7.0
Event History
Dec 19, 2008
CVE Published
via MITRE·04:09 PM
Data Sourced
via MITRE·04:09 PM
Description
Data Sourced
via NVD·04:30 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5681?
CVE-2008-5681 has a medium severity rating, indicating a moderate risk to systems using affected versions of Opera.
2
How do I fix CVE-2008-5681?
To fix CVE-2008-5681, update your Opera browser to version 9.63 or later.
3
What versions of Opera are affected by CVE-2008-5681?
CVE-2008-5681 affects Opera versions prior to 9.63, including all versions up to and including 9.62.
4
How does CVE-2008-5681 exploit systems?
CVE-2008-5681 allows remote attackers to read existing subscriptions and force subscriptions to arbitrary feed URLs through unspecified scripted URLs.
5
What precautions can I take against CVE-2008-5681?
To mitigate risks from CVE-2008-5681, ensure that you're using an updated version of the Opera browser and exercise caution with untrusted web feeds.