Opera

Search the knowledge base

Advisory: Vulnerability in createSVGTransformFromMatrix (JavaScript, SVG)

Summary

A vulnerability in createSVGTransformFromMatrix Object Typecasting can crash Opera.

Severity

Moderate

Problem description

Passing an incorrect object to createSVGTransformFromMatrix can crash Opera and enable arbitrary code execution.

Users who have disabled JavaScript are not affected.

Opera's response

Opera has released version 9.10, where this flaw has been corrected.

Credits

Thanks to iDefense Labs for notifying Opera Software about this vulnerability.


Browse through articles in the same categories: advisory