CVE-2008-4696
Summary
| CVE | CVE-2008-4696 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-10-23 22:00:01 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka md.dat). |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Opera | Opera | All | All | All | All |
| Application | Opera | Opera | 5..10 | All | All | All |
| Application | Opera | Opera | 5.0 | All | All | All |
| Application | Opera | Opera | 5.1 | All | All | All |
| Application | Opera | Opera | 5.11 | All | All | All |
| Application | Opera | Opera | 5.12 | All | All | All |
| Application | Opera | Opera | 5.2 | All | All | All |
| Application | Opera | Opera | 5.3 | All | All | All |
| Application | Opera | Opera | 5.4 | All | All | All |
| Application | Opera | Opera | 5.5 | All | All | All |
| Application | Opera | Opera | 5.6 | All | All | All |
| Application | Opera | Opera | 5.7 | All | All | All |
| Application | Opera | Opera | 5.8 | All | All | All |
| Application | Opera | Opera | 5.9 | All | All | All |
| Application | Opera | Opera | 6 | beta_1 | All | All |
| Application | Opera | Opera | 6.0 | All | All | All |
| Application | Opera | Opera | 6.01 | All | All | All |
| Application | Opera | Opera | 6.02 | All | All | All |
| Application | Opera | Opera | 6.03 | All | All | All |
| Application | Opera | Opera | 6.04 | All | All | All |
| Application | Opera | Opera | 6.05 | All | All | All |
| Application | Opera | Opera | 6.06 | All | All | All |
| Application | Opera | Opera | 7 | beta_1 | All | All |
| Application | Opera | Opera | 7 | beta_1.2 | All | All |
| Application | Opera | Opera | 7.0 | All | All | All |
| Application | Opera | Opera | 7.0 | beta_2 | All | All |
| Application | Opera | Opera | 7.01 | All | All | All |
| Application | Opera | Opera | 7.02 | All | All | All |
| Application | Opera | Opera | 7.03 | All | All | All |
| Application | Opera | Opera | 7.10 | All | All | All |
| Application | Opera | Opera | 7.11 | All | All | All |
| Application | Opera | Opera | 7.20 | All | All | All |
| Application | Opera | Opera | 7.20 | beta7 | All | All |
| Application | Opera | Opera | 7.21 | All | All | All |
| Application | Opera | Opera | 7.22 | All | All | All |
| Application | Opera | Opera | 7.23 | All | All | All |
| Application | Opera | Opera | 7.50 | All | All | All |
| Application | Opera | Opera | 7.50 | beta_1 | All | All |
| Application | Opera | Opera | 7.51 | All | All | All |
| Application | Opera | Opera | 7.52 | All | All | All |
| Application | Opera | Opera | 7.53 | All | All | All |
| Application | Opera | Opera | 7.54 | All | All | All |
| Application | Opera | Opera | 7.54 | update_1 | All | All |
| Application | Opera | Opera | 7.54 | update_2 | All | All |
| Application | Opera | Opera | 8.0 | All | All | All |
| Application | Opera | Opera | 8.0 | beta_1 | All | All |
| Application | Opera | Opera | 8.0 | beta_2 | All | All |
| Application | Opera | Opera | 8.0 | beta_3 | All | All |
| Application | Opera | Opera | 8.01 | All | All | All |
| Application | Opera | Opera | 8.02 | All | All | All |
| Application | Opera | Opera | 8.50 | All | All | All |
| Application | Opera | Opera | 8.51 | All | All | All |
| Application | Opera | Opera | 8.52 | All | All | All |
| Application | Opera | Opera | 8.53 | All | All | All |
| Application | Opera | Opera | 8.54 | All | All | All |
| Application | Opera | Opera | 9.0 | All | All | All |
| Application | Opera | Opera | 9.0 | beta_1 | All | All |
| Application | Opera | Opera | 9.0 | beta_2 | All | All |
| Application | Opera | Opera | 9.01 | All | All | All |
| Application | Opera | Opera | 9.02 | All | All | All |
| Application | Opera | Opera | 9.10 | All | All | All |
| Application | Opera | Opera | 9.20 | All | All | All |
| Application | Opera | Opera | 9.20 | beta_1 | All | All |
| Application | Opera | Opera | 9.21 | All | All | All |
| Application | Opera | Opera | 9.22 | All | All | All |
| Application | Opera | Opera | 9.23 | All | All | All |
| Application | Opera | Opera | 9.24 | All | All | All |
| Application | Opera | Opera | 9.25 | All | All | All |
| Application | Opera | Opera | 9.26 | All | All | All |
| Application | Opera | Opera | 9.27 | All | All | All |
| Application | Opera | Opera | 9.50 | All | All | All |
| Application | Opera | Opera | 9.50 | beta_2 | All | All |
| Application | Opera | Opera | 9.51 | All | All | All |
| Application | Opera | Opera | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Advisory: History Search can reveal browsing history - Opera Knowledge Base | af854a3a-2127-422b-91ae-364da2661108 | www.opera.com | Vendor Advisory |
| Opera 9.60 - Persistent Cross-Site Scripting - Windows remote Exploit | af854a3a-2127-422b-91ae-364da2661108 | www.exploit-db.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Opera 9.61 for Windows Changelog | af854a3a-2127-422b-91ae-364da2661108 | www.opera.com | |
| Risks in POS Systems: The Importance of a Security Assessment | af854a3a-2127-422b-91ae-364da2661108 | www.security-assessment.com | |
| Gentoo update for opera - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| oss-security - Re: CVE Request: Opera 9.60 with security fixes | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Opera Web Browser History Search Input Validation Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Exploit, Patch |
| Opera Stored Cross Site Scripting Vulnerability - CXSecurity.com | af854a3a-2127-422b-91ae-364da2661108 | securityreason.com | |
| Opera Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Gentoo Linux Documentation -- Opera: Multiple vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| Opera 9.61 for Linux Changelog | af854a3a-2127-422b-91ae-364da2661108 | www.opera.com | Patch |
| How can we help you? - Opera Help | af854a3a-2127-422b-91ae-364da2661108 | www.opera.com | Patch |
| oss-security - Re: CVE Request: Opera 9.60 with security fixes | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| Opera 9.61 for Solaris Changelog | af854a3a-2127-422b-91ae-364da2661108 | www.opera.com | |
| Opera 9.61 for Mac Changelog | af854a3a-2127-422b-91ae-364da2661108 | www.opera.com | Patch |
| [security-announce] SUSE Security Summary Report: SUSE-SR:2008:022 | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| SUSE Update for Multiple Packages - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.