CVE-2008-5679

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-12-19 · updated 2026-06-16
Weakness: CWE-399

Description

The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption.

Affected products

Opera Software AS Opera for Android: through 9.62; 5..10, 5.0, 5.0-beta_2, 5.0-beta_3, 5.0-beta_4, 5.0-beta_5 (+89)

References

http://secunia.com/advisories/34294
http://security.gentoo.org/glsa/glsa-200903-30.xml
http://securityreason.com/securityalert/4791
http://www.nruns.com/security_advisory_opera_html_parsing_code_execution.php
http://www.opera.com/docs/changelogs/linux/963/
http://www.opera.com/support/kb/view/921/
http://www.securityfocus.com/archive/1/499315/100/0/threaded
http://www.securitytracker.com/id?1021460
http://secunia.com/advisories/34294
http://security.gentoo.org/glsa/glsa-200903-30.xml
http://securityreason.com/securityalert/4791
http://www.nruns.com/security_advisory_opera_html_parsing_code_execution.php

Get alerted when CVE-2008-5679 or the next vulnerability affects your stack