CVE-2018-18913

    Dashboard / Vulnerabilities / CVE-2018-18913

    CVE-2018-18913

    Published: 21 Mar 2019Last Modified: 10 Mar 2026

    Summary:

    Details: Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the target. Once the document is opened, it may allow the attacker to take full control of the system from any location within the system. The issue lies in the loading of the shcore.dll and dcomp.dll files: these files are being searched for by the program in the same system-wide directory where the HTML file is executed.

    References: , https://blogs.opera.com/desktop/changelog-for-57/, https://lucideustech.blogspot.com/2019/02/opera-search-order-hijacking-cve-2018-18913.html

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2018-18913 | CVE-DB