CVE-2008-4197

8.8
HIGHCVSS v3.1 Base Score
6.33%
LOW RiskEPSS (93rd percentile)

Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings that contain uninitialized memory, which might allow user-assisted remote attackers to execute arbitrary code or conduct other attacks via vectors related to activation of a shortcut.

Published: 9/27/2008
Modified: 6/16/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v3 Score

8.8HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2 Score

9.3

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS Score (Exploitation Probability)

6.33%LOW Exploitation Risk
93rd percentile

This vulnerability has a 6.33% probability of being exploited in the next 30 days, ranking higher than 93% of all scored CVEs.

CWE Classification

Advertisement