Advisory: Certain domain names can allow execution of arbitrary code

October 27, 2009

Description

Specially crafted domain names can cause a memory corruption in Opera, which may lead to a crash. Successful exploitation can lead to execution of arbitrary code.

Severity

Extremely Severe

Opera's response

Opera Software has released Opera 10.01, where this issue has been fixed.

Credits

Thanks to Chris Weber of Casaba Security for reporting this issue to Opera Software.