CVE-2008-5680

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-12-19 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted text area, or allow (2) user-assisted remote attackers to execute arbitrary code via a long host name in a file: URL. NOTE: this might overlap CVE-2008-5178.

Affected products

Opera Browser: through 9.62; 1.00, 2.00, 2.10, 2.10-beta1, 2.10-beta2, 2.10-beta3 (+107)

References

http://secunia.com/advisories/34294
http://security.gentoo.org/glsa/glsa-200903-30.xml
http://securitytracker.com/id?1021457
http://www.opera.com/docs/changelogs/linux/963/
http://www.opera.com/support/kb/view/920/
http://www.opera.com/support/kb/view/922/
http://www.securityfocus.com/archive/1/498452/100/0/threaded
http://www.securityfocus.com/archive/1/498481/100/0/threaded
http://www.securityfocus.com/archive/1/498499/100/0/threaded
http://www.securityfocus.com/archive/1/498517/100/0/threaded
http://www.securityfocus.com/archive/1/498543/100/0/threaded
http://www.securitytracker.com/id?1021456

Get alerted when CVE-2008-5680 or the next vulnerability affects your stack